We take security seriously and appreciate the efforts of researchers and users who help keep this project safe.

If you discover a security vulnerability, we ask that you report it responsibly so it can be addressed quickly and without risk to users.

Please send details of the vulnerability to:

[email protected]

When possible, include:

• A clear description of the issue
• Steps to reproduce the vulnerability
• The affected version, commit, or component
• Any relevant screenshots, logs, or proof of concept

You do not need to include personal information beyond what is necessary to communicate with you.

• We will acknowledge receipt of your report within a reasonable timeframe
• We will investigate and work toward a fix as quickly as possible
• We may reach out for clarification or additional details
• Once resolved, we may publicly disclose the issue with appropriate credit, if desired

Please do not publicly disclose vulnerabilities until they have been reviewed and addressed. This helps protect users and the project's integrity.

We support good-faith security research. As long as you:

• Avoid data destruction, service disruption, or privacy violations
• Do not exploit the issue beyond what is necessary to demonstrate it
• Do not publicly disclose the vulnerability before resolution