If you found something which shouldn't be there or a bug which opens a security hole, please report it privately via GitHub Private Vulnerability Reporting: open the Security tab of the affected repository and click Report a vulnerability (https://github.com/roadrunner-php/<repo>/security/advisories/new).

The report is visible only to the maintainers until an advisory is published.

DO NOT PUBLISH SECURITY REPORTS PUBLICLY (e.g. in issues or pull requests).