If you discover a potential security issue in the libocispec project we ask that you notify us directly via email to [email protected] (not affiliated with opencontainers.org).

Please do not create a public issue.