All versions marked with ✅ will receive security updates. Keep in mind that the firebase sdk you use for your project might not get security updates even tho you are using a supported version of this package.

Before you report a vulnerability, make sure that the vulnerability is caused by this firebase-typescript package. This package only uses dev-dependencies and vulnerabilities in firebase or the firebase sdks should not be reported here.

Google offers a platform to report vulnerabilities: https://bughunters.google.com/

If you find a vulnerability in this package, please create a GitHub issue with the lable security and describe the vulnerability as detailed as possible. Make sure to provide the package version you used.