Please don't report security problems in public issues, pull requests or discussions.

Report them privately through GitHub instead: on the repository's Security tab, click "Report a vulnerability", or go straight to https://github.com/callstack/react-native-paper/security/advisories/new. Include what is affected (the version and the component or API), how to reproduce it, and what an attacker could do with it.

The maintainers will reply in the advisory, work on a fix there with you, and credit you when it is published, unless you'd rather not be named.