Please report a vulnerability privately, through GitHub's private vulnerability reporting: open the Security tab of this repository and choose Report a vulnerability. Do not open a public issue or pull request for it.

Please include the affected versions, what an attacker can do, and how to reproduce it, ideally as a short script. Vulnerabilities in the companion gem rails_semantic_logger are reported the same way in that repository.

Security fixes are released for the latest minor version of the current major version.

See Security for logging untrusted data, redacting sensitive values, transport encryption, and log file permissions.