Please don't report security vulnerabilities in public issues, pull requests or discussions. Use private vulnerability reporting instead. I will reply as soon as possible, and publish an advisory after the fix.
This project is learning material. The code is for learning, research and prototyping, not for controlling real vehicles. Reports about the code in this repository, its GitHub Actions workflows and, once released, its PyPI package are welcome.