Security defects must not be reported through public GitHub issues.
Use GitHub Private Vulnerability Reporting for this repository when available.
Include enough information to reproduce and assess the issue, including:
- affected component and version;
- attack prerequisites;
- reproduction steps;
- expected and observed behavior;
- potential security impact.
Do not publicly disclose an unresolved vulnerability before coordinated disclosure.
If GitHub Private Vulnerability Reporting is unavailable, email security reports to secops@lattix.io.
Do not disclose suspected vulnerabilities through public GitHub issues, discussions, or pull requests.