If you find a BetterCompass-related vulnerability of any kind, please email me at troplo@troplo.com.
If the vulnerability affects compass.education and is not directly related to BetterCompass, please follow their vulnerability reporting proceedure.
PLEASE DO NOT MAKE A PULL REQUEST FOR SECURITY VULNERABILITIES.
Thank you.