If you discover a security vulnerability, please report it through one of the methods below.

Use GitHub Security Advisories to report privately.

This allows us to discuss and fix the issue before public disclosure.

Send an email to [email protected] with [SECURITY] in the subject line.

1. Description — Brief explanation of the vulnerability
2. Impact — How the vulnerability could be exploited
3. Steps to reproduce — How to reproduce the issue
4. Suggested fix — How you would fix it (if applicable)

For all reported vulnerabilities, we will provide a timeline and keep you updated on our progress.

For a list of disclosed security issues, see Security Advisories.