Please do not report security vulnerabilities through public GitHub issues.

Instead, report a vulnerability through Render's Vulnerability Disclosure Program at https://hackerone.com/render

Please include a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue. Our team aims to respond to all new vulnerability reports within 7 business days.

We prefer all communications to be in English.

If you have suggestions on how this process could be improved please file an issue to discuss.