The fwup project takes security seriously. Thank you for helping keep fwup and its users safe.

Please do not report security vulnerabilities through public GitHub issues, pull requests, or discussions.

Instead, report them privately using either of the following:

• Use GitHub's "Report a vulnerability" button under the Security tab of the affected repository

Please include as much of the following as you can:

• The repository and version affected
• A description of the issue and its impact
• Steps to reproduce, or a proof-of-concept
• Any suggested mitigations

We will acknowledge your report, work with you on a fix, and coordinate disclosure once a release is available.