Please do not report security vulnerabilities through public GitHub issues.

Report them privately via GitHub private vulnerability reporting. Include:

• the affected component (server, proxy, dashboard, a client SDK) and version,
• a description of the issue and its impact,
• reproduction steps or a proof of concept if you have one.

We will acknowledge your report as soon as possible, keep you informed while we work on a fix, and credit you in the release notes unless you prefer otherwise.