If you believe you have found a security vulnerability in hcaptcha, please report it to us through coordinated disclosure.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Report the Advisory through Github's Security Advisory service or send an email to security[@]jerus.ie.