Reporting security issues
The project maintainers take security seriously. If you discover a security issue, please bring it to their attention right away!
Please DO NOT file a public issue, instead send your report privately to security@docker.com.
Security reports are greatly appreciated, and we will publicly thank you for it. We also like to send gifts--if you'd like Docker swag, make sure to let us know. We currently do not offer a paid security bounty program, but are not ruling it out in the future.