If you believe you have found a security vulnerability in Dependabot please contact us on support@dependabot.com so that we can resolve the issue before it is disclosed publicly.