If you think you have found a vulnerability in this repository, please report it to us through coordinated disclosure.

Please do not report exploitable security vulnerabilities through public issues, discussions, or pull requests.

Instead, report it using one of the following ways:

• The preferred way of reporting a security issue is the GitHub Security Advisory tab, that is, GitHub's "Report a Vulnerability" functionality.
• Alternatively, you can disclose security issues anonymously via email by contacting our security team at security@dash0.com. See https://www.dash0.com/policies/vulnerability-disclosure.pdf for more information. Please explicitly state that the security issue is for the Dash0 Agent Plugin when using this communication channel.

Please include as much of the information listed below as you can to help us better understand and resolve the issue:

• the type of issue (e.g., privilege escalation, RBAC permissions, insecure configurations, etc.)
• affected version(s)
• impact of the issue, including how an attacker might exploit the issue
• step-by-step instructions to reproduce the issue
• configuration required to reproduce the issue
• log files that are related to this issue (if possible)
• proof-of-concept or exploit code (if possible)

This information will help us triage your report more quickly.