Security fixes are applied to the current public release line.

Please report suspected vulnerabilities privately to admin1@sovnode.ai.

Include the affected component, release or commit, reproduction steps, expected impact, and any proposed mitigation. Do not include real credentials, customer data, or attacks against systems you do not own or have explicit authorization to test.

Please avoid public disclosure until SovNode has confirmed the issue and had a reasonable opportunity to prepare a fix. Public GitHub issues are appropriate for non-sensitive defects only.

This policy covers code maintained in this repository. Vulnerabilities that affect the original eladmin project without involving a SovNode modification should also be reported to the upstream maintainers.