Security updates are only applied to the latest published version.
Please do not disclose security vulnerabilities in public issues, disclosures, or pull requests.
Instead, please send an email to boiler.security@accenture.com.
Please include as much of the following information as possible, as it will help us to fix the issue:
- Issue type (for example cross-site scripting or SQL injection)
- Affected versions
- Location of the affected source code
- Detailed instructions for reproducing the issue step by step
- Proof-of-concept or exploit code (if available)
- The potential impact of the issue, outlining how an attacker could exploit it
We will do our best to reply to you within a week.
If you have feedback or suggestions on how this policy can be improved, please submit a pull request or create a feature request explaining what could be improved.