This repository follows the OpenSSF Vulnerability Disclosure guide. You can learn more about it in the Finders Guide.

Please report vulnerabilities via the GitHub Security Vulnerability Reporting or via email to [email protected] if this does not work for you.

Our vulnerability management team will respond within 3 working days of your report. If the issue is confirmed as a vulnerability, we will open a Security Advisory. This project follows a 90 day disclosure timeline.

If you have questions about reporting security issues, email the vulnerability management team: [email protected]