⚠️ **Security Vulnerability Disclosure Detected**

This issue appears to contain a security vulnerability report (CVE reference detected). 

**This issue has been closed** to protect ChurchCRM users from potential exploitation.

---

### Please Use Private Disclosure

Per our security policy, security vulnerabilities should **not** be reported via public GitHub Issues. Instead, please use GitHub's [Security Advisory](https://github.com/ChurchCRM/CRM/security/advisories) feature for private disclosure.

This allows us to:
- Work on a fix without alerting potential attackers
- Coordinate responsible disclosure
- Protect our users while the vulnerability is being addressed

### How to Re-report This Issue

1. Go to [Security Advisories](https://github.com/ChurchCRM/CRM/security/advisories)
2. Click **"New draft security advisory"**
3. Include all the details from this issue in the private advisory

For more information, see our [Security Policy](https://github.com/ChurchCRM/CRM/blob/master/SECURITY.md).

Thank you for helping keep ChurchCRM secure! 🔒
