We take security seriously at Rook and appreciate the efforts of security researchers who help keep our users safe.

If you believe you've found a security vulnerability, please follow responsible disclosure practices and do not open a public GitHub issue or pull request, as this could expose the vulnerability before a fix is available.

Instead, please report it privately:

• GitHub Security Advisory: Open a private advisory

This is the only reporting channel. An earlier version of this file also listed an email address on a domain this project does not own, so a report sent there reached a stranger rather than a maintainer.

We will acknowledge your report promptly and work with you to understand and resolve the issue as quickly as possible.