Email support@goflowstate.com with a description of the issue, the repo and version affected, and steps to reproduce. Do not open a public issue for a security report.

We acknowledge reports within five business days and keep you informed while we work on a fix. We do not run a bug bounty program.

This policy covers every repo in the goflowstate org and the services at goflowstate.com and its subdomains.