The borb team and community prioritize the security of the borb library. We deeply value your efforts to responsibly disclose vulnerabilities and will work to acknowledge and address your contributions promptly.

If you discover a security issue, please report it using the GitHub Security Advisory "Report a Vulnerability" tab.

Upon receiving your report, the borb team will respond with the next steps for addressing the issue. Throughout the process, we will keep you updated on progress toward a resolution and any public announcements. We may also reach out for additional details or clarification.

For security bugs in third-party modules, please contact the respective maintainer or team responsible for the module.