Report a security vulnerability

Email [email protected] or submit a security request with the details and steps to reproduce. Please do not open a public issue first, and give us reasonable time to fix it before publishing.

We acknowledge reports within 2 business days. Do not access other people's data, degrade the service, or run automated scans that affect other visitors. Our security page has the full policy.