Please do not open a public issue for security problems.

Instead, either:

• Use GitHub's private vulnerability reporting: Report a vulnerability, or
• Email tolu@pgsync.com with details and steps to reproduce.

You'll get an acknowledgement within a few days. Please allow time for a fix and coordinated disclosure before publishing details.

Vulnerabilities in the sync engine itself should be reported to pgsync via the same channels.