Do NOT open a public issue for security vulnerabilities.
Please report security issues by:
- Opening a GitHub Security Advisory in the affected repository.
- Including: description, reproduction steps, potential impact, and suggested fix if known.
- Acknowledgement within 48 hours.
- Assessment and fix timeline communicated within 7 days.
- Vulnerabilities in application code
- Dependency vulnerabilities
- Secrets accidentally committed
- Issues in dependencies not under this project's control (report upstream)
- Issues requiring physical access