If you find a vulnerability in Cerberus itself, please report it privately via GitHub private vulnerability reporting — do not open a public issue.

Cerberus is maintained on a best-effort basis; we aim to acknowledge reports within a week.