K3s supports responsible disclosure and endeavors to resolve security issues in a reasonable timeframe. To report a security vulnerability, email security@k3s.io . If you are sending us notification of what you believe to be a security vulnerability, please leave us a way to contact you in your original message (i.e. github username or email address).