To report a vulnerability, please follow the GitHub reporting instructions: click on the "Security" tab at the top of the repo and then click "Report a vulnerabilty".

CRA stewardship: This project is supported under the Linux Foundation CRA stewardship framework, as described at https://www.linuxfoundation.org/security. Security vulnerabilities should be reported through the mechanisms described above, which we will coordinate with our CRA steward. For actively exploited vulnerabilities and severe incidents that may require CRA escalation, please consider also posting a message in the #automated_testing or #general channel of Slack.