If you discover a security vulnerability in RefineID, please report it privately to petri.koistinen@refineid.fi. You can also use GitHub's Report a vulnerability feature on the repository Security tab.