EveryParser.Net evaluates expressions that are often provided by end users, so we take security reports seriously.

Please do not report security vulnerabilities through public GitHub issues.

Instead, use GitHub's private vulnerability reporting to submit your report.

Please include as much of the following information as possible:

• The type of issue (e.g. denial of service, crash on malformed input)
• A minimal expression that reproduces the problem
• The version of EveryParser.Net you are using
• Any relevant stack traces or error output

We will respond within 7 days and keep you informed about the fix. Once a fix is released, we will publish a GitHub security advisory and credit the reporter unless anonymity is requested.

Thanks for helping make EveryParser.Net safe for everyone.