Report it privately through GitHub's vulnerability reporting. Please don't open an issue or pull request for it.

• locallibrary: the latest release.
• localtoolbox: the latest build of main.
• Local Network: the live site at localnetwork.computer.

Fixes go into the next release or build. Older versions don't get them.

• Which tool and version (locallibrary --version, the number on the extension's card in chrome://extensions, or the page on the site).
• What an attacker could do, and what they'd need first.
• Steps to reproduce it, or a proof of concept.
• Your operating system and browser, if they matter.

Edit out tokens, passwords and anything else private from logs and screenshots before you send them.