Please report suspected security vulnerabilities privately. Do not open a public issue for a vulnerability report.

If GitHub private vulnerability reporting is enabled for this repository, use that flow. Otherwise, contact the maintainers through the NATS project security process before disclosing details publicly.

Public NATS security advisories are published at:

https://advisories.nats.io/

When reporting a vulnerability, include:

• affected version or commit;
• a minimal reproduction when possible;
• expected and observed behavior;
• impact assessment;
• any known workaround.