Please do not disclose vulnerabilities in a public issue. Use the repository's private vulnerability reporting with reproduction steps and the affected version. Do not include production credentials, task payloads, or customer data.

Celery Diagnostics will acknowledge a complete report as soon as practical. Security fixes are provided for the latest released Observer version.