We take the security of our project seriously. If you discover a security vulnerability, please report it to us privately through GitHub's security vulnerability reporting feature.
Please DO NOT open a public issue.
To report a vulnerability, please go to the "Security" tab of our GitHub repository and click on "Report a vulnerability". This will allow you to submit a report privately.
We will acknowledge your report within 24 hours and aim to provide a more detailed response within 72 hours. We will keep you informed about the progress of the fix and will notify you when the vulnerability has been addressed.
Once a vulnerability has been reported and a fix has been developed and deployed, we will publicly disclose the vulnerability and credit the reporter (unless they wish to remain anonymous).
We only provide security updates for the latest stable release of the project. Please ensure you are using the most recent version to receive all security patches.