Security

SECURITY.md

Security Policy

Reporting a vulnerability

Do not open a public GitHub issue for security vulnerabilities.

Use GitHub's private vulnerability reporting feature when available, or contact the repository maintainer privately.

Include:

A clear description
Reproduction steps
Potential impact
A proposed fix, when possible

Never include active ClickUp authz_token values in public reports.

There aren't any published security advisories