To report a vulnerability, please contact us privately through the NuGet Contact Owners feature. Please include your GitHub user name, your email address, and a detailed description of the vulnerability.

We will inform everyone of vulnerability fixes in our release notes and directly to the person reporting.