Security fixes are released in the latest version of the exporter. Please make sure you can reproduce the problem with the latest release before reporting it.
Please do not open a public issue for security vulnerabilities.
Report them privately using GitHub's private vulnerability reporting (Security tab → Report a vulnerability).
Please include:
- the affected version and how you run the exporter (binary, container image, Helm chart)
- a description of the issue and its impact
- steps or a proof of concept to reproduce it
You can expect an initial response within a few days. Once the issue is confirmed, a fix is prepared privately, released, and the advisory is published.