Warning
Please do NOT report security vulnerabilities through public GitHub issues.
If you discover a security vulnerability, we encourage you to report it as soon as possible. Please follow the steps below to report a vulnerability:
-
Do not open an issue on GitHub: Security issues should not be publicly disclosed until they have been addressed. Avoid discussing potential vulnerabilities in public forums such as GitHub issues, forums, or social media.
-
Report the vulnerability to Dr. John Kildea at [email protected]. Please include as much information as possible to help us understand the nature and scope of the issue:
- A detailed description of the vulnerability
- Affected component and version
- Steps to reproduce the vulnerability
- Any relevant screenshots or code snippets
- Potential impact of the vulnerability
- Any other relevant information
For security vulnerabilities found in third-party dependencies that we use in our product, please also contact the dependency's owner or maintainer directly as per their security policy.