The sqlite3-ruby Core Contributors take security very seriously and investigate all reported vulnerabilities.

If you would like to report a vulnerability or have a security concern regarding sqlite3-ruby or how sqlite3-ruby is using any of its underlying platform-specific libraries (such as sqlite itself), please report it via Github.

Your report will be acknowledged within 72 hours, and you'll receive a more detailed response within 7 days indicating next steps in handling your report.

If you have not received a reply to your submission within 72 hours, contact the current security coordinator (Mike Dalessio mike.dalessio@gmail.com).

The information you share with the sqlite3-ruby Core Contributors as part of this process will be kept confidential within the team, unless or until we need to share information upstream with our dependent libraries' core teams, at which point we will notify you.

If a vulnerability is first reported by you, we will credit you with the discovery in the public disclosure.