How to report a security vulnerability in Casbin?

How to report a security vulnerability?

file a github issue

or email the lead devs, same as any project

ok, thx

if it's something seriously 0-day, i'd say generally try to contact privately

then use your judgment from there if they don't respond

what issue?

small glitch, which lead to "steal" other ACL result in cache

I just touched casbin this morning

just send a github issue then

I'm not sure if it's serious, I'm going to reproduce it in prod environment.

thanks