If the vulnerability can be discussed publicly due to not being exploitable:
- Please open a new issue with the "Report a security vulnerability in the runtime library" template.
If the vulnerability cannot be discussed publicly due to being potentially exploitable:
- Please send an email to the following address: [email protected]
- With the subject field "Otterkit Compiler Security Vulnerability"
- Include a detailed description of the vulnerability, where it occurs and the steps to reproduce it.
- Open a new issue with the "Report a security vulnerability" template, do not include where it occurs or how to reproduce it, only mention that an email has been sent to discuss the vulnerability.