Security is important for us. Security vulnerabilities or suspected security vulnerabilities should be reported to the project's maintainers privately, to minimize attacks against current users of StreamsHub projects before they are fixed.

Reported vulnerabilities will be investigated and patched as part of the next patch (or minor) release or as soon as practical depending on severity.

IMPORTANT: Please do not file public issues on GitHub for security vulnerabilities.

StreamsHub projects utilise Git Hub Private Vulnerability Reporting (PVR) to enable private reporting, fixing and co-ordinated disclosure.

To report a vulnerability or a security-related issue, please use the Report a vulnerability button on the relevant project's Security and quality tab. For example, for the StreamsHub Console this is located at https://github.com/streamshub/console/security.

Do not report non-security-impacting issues through this channel. Use GitHub issues instead.