Project
Security policy
How to report a vulnerability.
Please report vulnerabilities privately through GitHub’s Report a vulnerability (Security tab), not in a public issue. See SECURITY.md for scope and response times. How the engine handles untrusted text is described in Security and prompt injection.