Please report vulnerabilities privately: Security → Advisories → Report a vulnerability in this repository. Never in a public issue, pull request or Discord message.

The full process (response within 3 working days, coordinated disclosure, credit) is in the Solid Geeks security policy.

Only the version published at https://solidgeeks.github.io/open-source-the-world/ (the main branch) receives fixes.