Please do not report security vulnerabilities through public GitHub issues.

Instead, use GitHub's private vulnerability reporting feature: go to this repository's Security tab and select Report a vulnerability. This opens a private advisory visible only to you and the repository's maintainers, so the details aren't disclosed publicly before a fix is available.

This is currently the only channel for reporting security issues against Sergeant.

We'll acknowledge your report and work with you on assessing and addressing it before any public disclosure.