squall is a testing library: it serves in-memory fakes and is not meant to be exposed to untrusted networks. Still, please report anything that could affect the code that uses it, such as a crash or resource exhaustion from a request.
Report vulnerabilities privately through GitHub security advisories. Please do not open a public issue. We aim to respond within five business days.