Please report a vulnerability privately through this repository's Security tab (Report a vulnerability), not in a public issue. Include what you found, how to reproduce it, and what it exposes.

Dig runs on your own computer and keeps your API keys in a local keys.env file. Reports about keys or research leaving that computer, or about a provider's response being able to steer Dig, are especially welcome.