Do not open a public issue for a security problem. Report it privately with GitHub's private vulnerability reporting.

1. Open the repository the problem affects.
2. Go to the Security tab.
3. Choose "Report a vulnerability".

Only the maintainers can see the report.

• The repository and the version or commit you tested.
• A description of the problem and its impact.
• Steps to reproduce, or a minimal example.
• Your operating system and how you run the software.
• Any fix or mitigation you already know of.

• Details of the vulnerability before it is fixed.
• Proof-of-concept code that exploits it.
• Real credentials, keys, tokens, or private data.

Use only test data in your reports.

This policy covers every repository in the chunkdb organization. Bugs that are not security problems belong in a normal issue.