This is a research environment, not production software, but we still take reports seriously.
If you find a security issue (e.g. an unsafe deserialization path, a supply-chain concern, or a way the reward can be exploited to exfiltrate data), please do not open a public issue. Email vedant@vrin.cloud with details and a repro. We'll acknowledge within a few days and credit you if you'd like.