Bubblewrap has refused to fix known security issues in its codebase and shouldn't be used.