Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

Please do NOT report security vulnerabilities through public GitHub issues.

Instead, please use GitHub's private vulnerability reporting.

You should receive a response within 48 hours.

Please include:

Type of issue
Full paths of affected source files
Steps to reproduce
Impact assessment

Disclosure Policy

We follow Coordinated Vulnerability Disclosure.

There aren't any published security advisories