Security Policy

Reporting a Vulnerability

Please report security issues privately via GitHub Security Advisories for this repository.

Do not open public issues for vulnerabilities that may impact users.

Response Targets

• Initial acknowledgment: within 2 business days
• Triage decision: within 5 business days
• Remediation timeline: communicated after triage