To report a vulnerability, please contact us privately through the NuGet Contact Owners feature. Please include a detailed description of the vulnerability.

We will inform everyone of vulnerability fixes in our release notes.