To report a vulnerability, please use the "Security" tab in our GitHub repository. If you are not comfortable with disclosing the issue publicly, you can email us at [email protected].
We will try to respond to your report within 48 hours and will keep you updated about the progress of resolving the issue. Please understand that the resolution process might take some time depending on the complexity of the issue.
If the reported issue is confirmed as a vulnerability, we will work on a fix and plan a release. We will also acknowledge your contribution in the release notes.