This document outlines the process for reporting security vulnerabilities and our approach to handling security issues responsibly.
Please do not open public GitHub issues for security vulnerabilities. If you discover a potential security flaw, please report it privately to help protect the community. Use one of the following ways to report security issues:
- GitHub Security Advisories: Use the Report a Vulnerability under "Security".
- Email: nitishkgupta1@gmail.com
We take security issues seriously and aim to address them as quickly as possible. Upon receiving a report, the maintainers will:
- Acknowledge receipt within 48 hours.
- Verify the vulnerability and determine its severity.
- Work on a fix.
- Notify the reporter once the fix is ready for testing or has been deployed.
- Publicly disclose the vulnerability in our release notes (giving you credit).