Please do not open a public GitHub issue for security reports. Use either private channel:

• GitHub private advisory (preferred): open a draft at https://github.com/cynative/cynative/security/advisories/new.
• Email: security@cynative.com.

Include:

• the Cynative version, please confirm it's the latest;
• how it was installed;
• a clear description of the issue and its security impact;
• steps to trigger the behavior;
• relevant logs.

Do not include live credentials, tokens, secrets or customer data in a report.