Please report vulnerabilities privately by email to tiggreee@vmdev.lat.

Include:

• Affected repository and version/commit
• Reproduction steps or proof of concept
• Impact assessment
• Suggested mitigation (if available)

Response targets:

• Initial acknowledgement: within 72 hours
• Triage decision: within 7 days
• Fix timeline: based on severity and exploitability

Do not open public issues for unpatched security vulnerabilities.