Use the repository's Security → Report a vulnerability option when available for issues needing private disclosure. Otherwise contact CompleteTech LLC through complete.tech to arrange private reporting. Include the affected commit, a minimal local reproduction, expected and actual behavior, and impact. Omit credentials, real target lists, and third-party data. Do not publish sensitive details in a public issue while private review is underway.

Only the current default branch is maintained. Reproduce against its latest revision when possible. No response-time guarantee is made.

This project is dedicated to CVE-2026-102826. It provides offline package-version evidence triage. It does not scan deployed systems or test exploitability.

Output must distinguish reported versions and configuration hints from confirmed exposure. Exploitability remains not_tested. Use assessment features only for authorized targets; project development alone authorizes no network scanning. Keep real inventories and assessment results outside the repo.

For a vulnerability in the affected upstream product or a service you assess, follow that vendor's or service owner's published security-reporting process.