The latest released version of each project receives security updates. Please upgrade to the current release before reporting an issue.
Please do not report security vulnerabilities through public GitHub issues.
Instead, report them privately through GitHub's private security advisories (the repository's Security tab → Report a vulnerability), or by email to bryan.li@gmail.com.
Please include:
- A description of the vulnerability and its impact.
- Steps to reproduce or a proof of concept.
- Affected version(s) and environment details.
We aim to acknowledge reports within a few days and will keep you informed as we work on a fix. We appreciate responsible disclosure and are happy to credit reporters who wish to be acknowledged.