Do not report security issues in public issues or discussions.

Report a suspected vulnerability through the LottieFiles Help Center. Include a clear impact summary, safe reproduction steps, affected package version, and any relevant error code. Do not include credentials, access tokens, private URLs, user data, or full query variables.

The team will assess the report and provide a response through the support process. See the threat model for package security controls.