If you think you've identified a security issue in a project under the weserv umbrella, please do not report the issue publicly via a mailing list, an issue on the GitHub issue tracker, a pull request, or any other public venue.

Instead, report the issue privately using the contact information provided in our security.txt file.