Report suspected security vulnerabilities through GitHub's private vulnerability reporting. This allows the Vendure maintainers to discuss and resolve the report securely before any details are made public.

Please do not report security vulnerabilities through public GitHub issues or email.