Do not open a public issue. Use GitHub private vulnerability reporting: in the affected repository, go to the Security tab and choose Report a vulnerability.

Include the affected repo and version or commit, the impact, and the steps to reproduce. We aim to acknowledge reports within 7 days.

Our tools (perfratio, tools-benchmark, tools-dataset, tools-commons) and the infrastructure that runs benchmarks. Benchmark implementations in the catalogs are test programs. Report problems in third-party frameworks or languages to their upstream projects.