Found a vulnerability? Thank you for looking out for everyone.

Please don't post it in a public issue or on Discord. That tells attackers before we can fix it.

Report it privately instead:

1. Go to the repository's Security tab, for example https://github.com/MusicTribeOpenSource/0700-AAM/security/advisories/new
2. Click Report a vulnerability.
3. Describe what you found and how to reproduce it.

GitHub explains the process here: https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability

Only the repository's maintainers and the organization's owners can see your report.

• We aim to reply within 3 working days.
• We'll keep you updated while we work on a fix, and agree a disclosure date with you.
• We aim to fix confirmed vulnerabilities and publish an advisory within 90 days.
• When it's fixed, we'll credit you in the advisory if you'd like.