Security fixes are released for the latest minor version of the API and of @codebar-ag/feedback-widget.

Please report security issues privately to Codebar Solutions AG: security@codebar.ch. Include the affected component (API or widget), steps to reproduce and, if possible, a proof of concept. Please do not open a public issue for an active vulnerability.

We acknowledge reports within five business days and coordinate a fix and disclosure with you. The security model is described in the README.