Please do not report security vulnerabilities in public GitHub issues, discussions or pull requests.

Report them privately on GitHub instead: open the Security tab of this repository and click "Report a vulnerability", or go straight to the report form. Only you and the maintainers can see the report.

Please include:

• the version of the com.convertapi.client:convertapi Maven package and of Java you use;
• the steps to reproduce the issue, or a proof of concept;
• what an attacker could do with it.

We will confirm that we received your report and keep you updated until it is fixed. Please give us reasonable time to release a fix before you disclose the issue publicly.

You can use the same private route if you are not sure whether the issue is in this SDK or in the ConvertAPI service itself.

Security fixes are released in the latest version of the com.convertapi.client:convertapi package on Maven Central. Please check that the issue still occurs with the latest version before you report it.