Please do not report vulnerabilities in public issues.

Use GitHub private vulnerability reporting for this repository when available. If that is unavailable, contact the maintainers at team@knowhereto.ai and ask for security triage before sharing exploit details.

Include:

• affected version or commit
• reproduction steps
• impact
• whether the issue is already public

We will acknowledge reports as soon as practical and coordinate disclosure after a fix is available.