Please don't open a public issue for security problems. Report them privately through GitHub instead: go to the Security tab and choose Report a vulnerability.

Include what you found, how to reproduce it, and which version and OS you're on. You should hear back within a week.

Only the latest release gets fixes. MeetLoaf updates itself, so check you're on the newest version before reporting.

In scope: the MeetLoaf app, the Firefox and Chrome router extensions, and the meet:// URL handler.

Out of scope: Google Meet itself (report those to Google) and Velja.