Responsible disclosure
Report security concerns privately.
Please do not place suspected vulnerabilities, credentials, private data, or exploit details in a public issue.
Report a vulnerability privately through GitHub.
This protected channel keeps sensitive details out of public issues.
This protected channel keeps sensitive details out of public issues.
What to include
- The affected JSForm version and component
- A concise description of the impact
- Safe reproduction steps or a minimal example
- Any known mitigation
Receipt, assessment, and coordinated disclosure expectations will be published with the public repository.