If you believe you have found a security vulnerability in any of our repository, please report it to us through coordinated disclosure.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, please send an email to the active maintainer at [email protected].

Please include as much of the information as you can to help us better understand and resolve the issue:

We aim to respond within 7 to 10 working days to reported security vulnerabilities.

We identify every known security vulnerability after it was closed in the release notes,