Please do not open a public issue for security vulnerabilities.
Report privately using GitHub's Private Vulnerability Reporting. This keeps the report confidential and notifies the maintainers directly.
If you are unable to use that channel, you can email: codebyit.conduct@gmail.com
Include:
- Affected version
- Reproduction steps
- Potential impact
- Suggested fix (optional)
- Initial response: within 5 business days
- Triage status update: within 10 business days
- Fix timeline: depends on severity and complexity