Please do not open a public issue for a suspected vulnerability or exposed credential.
Email [email protected] with:
- a description of the issue and its impact;
- steps or a proof of concept that reproduce it;
- the affected version or commit; and
- any suggested mitigation.
Avoid accessing data that is not yours and do not include real user data, database credentials, tokens, or other secrets in the report.
Security fixes target the latest released version and the current main branch. Older builds may need to update before receiving a fix.