Please report security issues and bugs privately by emailing security@duendesoftware.com. This will allow us to assess the risk and make a fix available before the issue is publicly disclosed.
Please do not create public issues if you believe you have found a security problem.
Security reports will receive a response from Duende within two business days.
Thanks!