view release on metacpan or  search on metacpan

SECURITY.md  view on Meta::CPAN

issue, or if the issue is being actively exploited, please report it to the
CPAN Security Group (CPANSec) at cpan-security@security.metacpan.org.

Please do not use the public GitHub issue tracker to report security
vulnerabilities, and please do not disclose a vulnerability in public forums
until the maintainers or CPANSec have made it public. That includes patches,
pull requests and mitigation advice.

Please include as many details as possible, including code samples or test
cases, so that the issue can be reproduced. Check that your report does not
expose any sensitive data, such as passwords, tokens, or personal information.

The maintainers will normally credit the reporter when a vulnerability is
disclosed or fixed. If you do not want to be credited publicly, please say so
in your report.

For more information, see [Report a Security
Issue](https://security.metacpan.org/docs/report.html) on the CPANSec website.

### What to expect