Responsible Security Disclosure

Protect affected users while helping the responsible project confirm and fix a possible vulnerability. This is a reporter-side workflow. It does not authorize testing, submission, publication, or access to a system.

Workflow

1. Freeze public action

Treat the finding and related artifacts as confidential until the responsible security process permits disclosure.

Do not: