If you discover a security vulnerability, please report it responsibly via GitHub Security Advisories rather than opening a public issue.
We will acknowledge receipt within 48 hours and aim to provide a fix or mitigation plan within 7 days.
This policy covers the esq-cli codebase. Issues with Elasticsearch itself should be reported to Elastic.