While Capital is pre-1.0, only the latest release on main receives security fixes. Update the table below once we start maintaining multiple release lines.

Please do not open a public issue for security vulnerabilities.

Instead, report it privately via one of:

• GitHub's private vulnerability reporting (preferred — enable it under Settings → Security → Advisories), or
• Email furkandedizkan@gmail.com.

Please include:

• A description of the vulnerability and its impact.
• Steps to reproduce, or a proof-of-concept.
• Affected version(s) / commit, and your environment.

• We aim to acknowledge a report within 72 hours.
• We'll keep you informed of progress and credit you in the advisory unless you prefer to remain anonymous.
• Please give us a reasonable window to ship a fix before any public disclosure.