To report a security issue, please use email security@lists.a2aproject.org.

We use a mailing list for our intake, and do coordination and disclosure here using GitHub Security Advisory to privately discuss and fix the issue.