Report privately through GitHub: open the repository's Security tab and choose Report a vulnerability. Private vulnerability reporting is enabled, so the report stays visible only to the maintainers until a fix ships.

Direct link: https://github.com/n24q02m/better-semantic-release/security/advisories/new

Please do not open a public issue for a security vulnerability.

This project is a fork of python-semantic-release. A vulnerability in code this fork inherits unchanged should also be reported upstream; a vulnerability in src/semantic_release/bsr/ or in a file marked # BSR-PATCH: belongs here.