Please do not open a public issue for security problems.
Use GitHub's private vulnerability reporting instead: on the repository page, open Security → Report a vulnerability (https://github.com/backbonesk/libreserv-client-python/security/advisories/new). Only the maintainers can see the report. We will acknowledge it, work with you on a fix, and credit you in the advisory unless you prefer otherwise.
Reports about webhook signature verification, TLS handling, credential leakage (logs, reprs, redirects), and response handling are all in scope.
Security fixes are released for the latest minor version.