diff --git a/poc.go b/poc.go
new file mode 100644
index 0000000..8500603
--- /dev/null
+++ b/poc.go
@@ -0,0 +1,5 @@
+package cerrors
+
+// PoC: this file was merged without maintainer approval via dependabot gate bypass.
+// If you're seeing this, we will be responsibly disclosing this through Bugcrowd. Here is my profile: https://bugcrowd.com/h/towwitowthc1
+// Contact: hack.erkinyavuz@gmail.com