If you think you've found a security issue in Malloy, please don't open a public issue, discussion, or pull request about it.

Instead, contact us privately:

• Use GitHub private vulnerability reporting, or
• Reach out to the maintainers in our Slack.

We'll take a look and follow up. Please give us a chance to ship a fix before sharing the details publicly.