Please do not open a public issue for security vulnerabilities.
Instead, use GitHub's private vulnerability reporting: open the repository's Security tab → Report a vulnerability. This creates a private advisory visible only to the maintainers.
Please include:
- a description of the issue and its impact,
- steps to reproduce or a proof of concept,
- the affected version / commit.
We will acknowledge your report as soon as we can and keep you updated on the fix. Thank you for helping keep Kintsugi and its users safe.
Kintsugi is in early development. Security fixes are applied to the main branch; there are no long-term support branches yet.