Security vulnerabilities can be reported by e-mail to the HEASARC CFITSIO/CCfits help desk at ccfits@heasarc.gsfc.nasa.gov

Please include as many details as possible, including code samples or test cases, so that we can reproduce the issue. Check that your report does not expose any sensitive data, such as passwords, tokens, or personal information. Please do not use GitHub issues for reporting security vulnerabilities.