Please don't report security vulnerabilities through public issues, discussions, or pull requests.
Instead, report them privately through GitHub:
- Go to the Security tab of the affected repository.
- Click Report a vulnerability.
- Describe the issue, the steps to reproduce it, and its potential impact.
Only the repository's maintainers can see the report. We'll acknowledge it, keep you updated as we investigate, and credit you in the published advisory if you'd like.
This policy covers every repository in the CanIL-CA organization, unless a repository has its own SECURITY.md. Archived repositories are no longer maintained and won't receive fixes.