Do not disclose vulnerabilities in public issues. Use GitHub private vulnerability reporting in the affected repository. Child privacy, extension sandbox escapes, remote-code execution, integrity bypass, permission bypass and unauthorized profile-data access are treated as high-priority security issues.