Security Policy Reporting a Vulnerability Send vulnerability reports to security@cloudsmith.io. Do not open a public GitHub issue for a vulnerability.