Report security vulnerabilities in private. A public GitHub issue, discussion, or pull request is public disclosure.

Use Report a vulnerability on the security advisories page:

https://github.com/openframeworks/openFrameworks/security/advisories/new

If you cannot use that form, email of at openFrameworks [.cc].

Please include:

• the openFrameworks version or commit, and the operating system
• what the issue is, and what the impact is
• steps to reproduce, or a proof of concept, when you have one

Maintainers will confirm the report on the advisory and coordinate a fix before publishing it.

Please report against the latest release or master. Fixes are committed to master and included in the next release.