Please refer to https://oxc.rs/docs/contribute/security.html for our established security practices.

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.