Email [email protected] to report a suspected security vulnerability in a project or service.

Include the affected project or service, reproduction steps, and the potential impact. Share only the information needed to explain the issue. Do not include credentials, personal data, or confidential client data.

Do not disclose vulnerability details in public issues or pull requests. Coordinate disclosure with us before publishing technical details.

If a repository provides its own security policy, follow that policy instead.