If you have discovered a security issue with Lando, please contact the Lando Security Team directly at email@example.com. We manage security issues separately in a private repository until the issue has been resolved. Even if you're not sure if it's a security problem, please contact the security team before filing an issue, blogging, or tweeting about it.
Is your company looking at adopting Lando and performing a security evaluation? Contact firstname.lastname@example.org and we can help you get started.