Do not report security vulnerabilities through public GitHub issues.
Contact Funnel support and identify the report as a security issue. Include the affected client or endpoint, reproduction steps, and potential impact. Avoid including credentials, access tokens, or customer data.
For information about Funnel's security and data-handling practices, see Funnel data privacy and security.