Please do not open a public issue for a security problem. Report it privately:
- GitHub: open a private advisory from the repository's Security tab (Report a vulnerability), or
- Email: hello@bunzzle.com with "SECURITY" in the subject.
Each repository can have its own, more detailed policy. The engine's policy, with response times and scope, is in bunzzle/bunzzle.