Security issues may be reported against the latest stable release of GWT or against the current development version (HEAD-SNAPSHOT, see Testing the latest version for details).

Issues where a developer's machine may be compromised by running the GWT compiler or development server on malicious code are not considered security vulnerabilities.

If you found a vulnerability, please use GitHub Security Advisories to report it confidentially.