Inertia is pre-1.0.0. Only the latest release of each package receives security fixes.

Don't open a public issue for a security problem.

1. Open the Security tab of this repository.
2. Select Report a vulnerability and fill in the private form.
3. Give the affected package, the version, and the steps to reproduce.

We reply within 7 days. We publish a fix and an advisory after we confirm the report.

Inertia runs inside your React Native app and has no network or server component. You can also report a problem in the docs site or the example app. We give those reports a lower priority than a defect in a published package.