please use GitHub's security advisories or email security@trycap.dev (pgp key) to report any security issues.

for "CAPTCHA bypasses", a working fix is required.