gateway sits directly in the request path between your application and
model providers, so security reports are taken seriously.
Please do not open a public issue for a security vulnerability.
Instead, report it privately using GitHub's built-in flow:
- Go to the affected repository's Security tab.
- Click "Report a vulnerability" to open a private security advisory.
If the affected repo doesn't have Security Advisories enabled, use the
private advisory form on this .github repo
instead and mention which repo it affects.
We aim to acknowledge new reports within 48 hours and to provide a remediation timeline once the issue is confirmed.
Only the latest released version of each repo is supported with security fixes.