If you believe you have found a security vulnerability in this project, please report it privately. Do not open a public GitHub issue.

Report vulnerabilities via one of the following:

• GitHub's private vulnerability reporting: use the "Report a vulnerability" button under the repository's Security tab.
• Email: security@dbtlabs.com

Please include:

• A description of the issue and its potential impact
• Steps to reproduce, or a proof-of-concept
• Affected versions / commit SHAs
• Any suggested mitigations

We will acknowledge your report, investigate, and coordinate a fix and disclosure timeline with you.

This project is provided on a best-effort basis. Security fixes are made against the latest commit on main; older tags are not actively patched.