1.4.2 Security audit: correct problems found during audit

This issue exists to track security problems found during the audit done by radicallyopensecurity.com between May 9 and May 20, 2022.

The full report will be shared here once mitigations have been implemented.