Please see https://puppet.com/security for information about our security policy and for responsibly reporting security issues.