Report security vulnerabilities in Wren Runtime privately, on this repository's Security tab. Please don't open a public issue for one.

In your report, say:

• which release it affects
• how to make it happen
• what it lets an attacker do

Multibox Labs replies on the report, and publishes an advisory once a release with the fix is out. Only the latest release gets security fixes.

Wren Runtime is built on Chromium, so it has Chromium's vulnerabilities too. Report one of those to Chromium's security tracker, and Wren Runtime takes Chromium's fix in its next release. If it's serious, tell us here as well, so we can plan that release.