Privately report a security issue by navigating to https://github.com/11ty/eleventy/security and using the “Report a vulnerability” button.

Read more at: https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability

Alternatively, you may report security issues via an email to security@11ty.dev.