Please do not report security vulnerabilities through public GitHub issues.
Instead, use one of the following:
- GitHub Private Vulnerability Reporting (preferred)
- Email: yuriy.peysakhov@gmail.com
Include the following in your report:
- Description of the vulnerability
- Steps to reproduce
- Affected versions
- Potential impact
I will acknowledge your report within 5 business days and provide updates as the issue is investigated and resolved.
| Version | Supported |
|---|---|
| 2.0.x | Yes |
| < 2.0.0 | No |
Upgrade to the latest release before reporting issues in older versions.
- Do report vulnerabilities privately using the methods above
- Do provide enough detail to reproduce the issue
- Do not publicly disclose the vulnerability until a fix is available
- Do not exploit the vulnerability beyond what is needed to verify it