We take security vulnerabilities seriously. If you discover a security vulnerability, please follow these steps:
Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.
Send an email to: [email protected]
Include the following information:
- Description of the vulnerability
- Steps to reproduce the issue
- Potential impact
- Any suggested fixes or mitigations
- Initial Response: Within 48 hours
- Status Update: Within 7 days
- Fix Timeline: Critical issues within 30 days, others within 90 days
- We will acknowledge receipt of your vulnerability report
- We will investigate and validate the issue
- We will work on a fix and coordinate disclosure
- We will credit you for the discovery (if desired)
We appreciate the security research community and will acknowledge researchers who report vulnerabilities responsibly.