Please do not open a public GitHub issue for security vulnerabilities.

Instead:

1. Use GitHub's private Security Advisories feature, or
2. Contact the repository owner via GitHub.

Include:

• Description of the issue
• Steps to reproduce
• Affected versions
• Potential impact

We will acknowledge receipt within a reasonable time and coordinate a fix.

This repository is an independent prototype. It is not part of the official OpenTelemetry security response process. For vulnerabilities in official OpenTelemetry components, follow OpenTelemetry security policies.