To report a vulnerability, please report it on GitHub directly.
You can follow the procedure described here:
- Navigate to the security tab on the repository
- Click on ‘Advisories’
- Click on ‘Report a vulnerability’
- Detail the issue
The reporter(s) can typically expect a response within 24 hours acknowledging the issue was received.
If a response is not received within 24 hours, please reach out to any maintainer directly to confirm receipt of the issue.