We fix security issues only in the newest version of each package. We release no more versions of react-awesome-reveal 4. To get the fixes, upgrade to version 5 or to @awesome-reveal/react.
Do not open a public issue for a vulnerability. All users can see an issue before a fix is available.
- Open the Security tab of the repository.
- Click Report a vulnerability.
- Describe the issue, and give the steps to reproduce it.
The report stays private between you and the maintainers. We reply in the advisory.