Report a suspected vulnerability

Please wait to disclose publicly until the issue can be reviewed. Do not post credentials, purchase tokens or customer evidence in public issues or include them in your initial email.

• The affected repository, page or component and software version or commit.
• A description of the issue and its potential impact.
• Minimal reproduction steps using test data in an environment you control.
• Relevant configuration details with secrets and personal data removed.

Review is best effort. This project does not promise a response deadline, 24/7 coverage, emergency support or a fix for every reported version. Reporting an issue does not authorize testing against customer systems or accessing data without permission.

For purchase or artifact-retrieval problems, see Support.