Security Policy

Reporting a Vulnerability

Please report security issues privately through GitHub Security Advisories for this repository:

Do not open a public issue for a security report unless the issue has already been disclosed.

For encrypted communication, download the PGP public key here:

Verify the fingerprint before trusting the key:

B521 D109 5C63 E077 EAE8 54E9 6805 708F 78A1 9272

If you are unsure whether a report is security-sensitive, use GitHub Security Advisories first.