[effbott]

The password is sent in plaintext in the POST body.

[alainmeier]

Indeed, that one is listed in the known vulnerabilities section of the repo. Thank you for trying it out

[effbott]

Thanks for making it! Computer security is a fascinating field that I've only begun to dive into recently.