Only the main branch receives security fixes.

Please do not report security vulnerabilities through public GitHub issues, pull requests or discussions.

Report them privately through GitHub instead:

1. Go to the Security tab of this repository.
2. Click Report a vulnerability.
3. Fill in the form with as much detail as you can.

Helpful details include:

• The type of issue (for example XSS, SQL injection, CSRF or an authentication bypass)
• The affected file(s), URL(s) or page(s)
• Steps to reproduce the issue
• The possible impact, and how an attacker could exploit it

• We will acknowledge your report within 72 hours.
• We will keep you updated while we investigate and work on a fix.

Thank you for helping keep ShopNow and its users safe.