Please provide a private channel for vulnerability disclosure

[dyingman1]

I have identified a security vulnerability in chronicle-wire that I would
like to report through a private channel before public disclosure.

Affected version: 2026.6 (latest)
Severity: High
Component: BinaryWire

I have already attempted to reach out via security@chronicle.software.
Please respond so we can coordinate responsible disclosure.

[tgd]

Hi, thanks for responsibly disclosing - I can confirm we have received your report and the team are actively reviewing. I have responded to your disclosure via email and we will be in touch with further updates.

[sam-ross]

Thanks again for the responsible disclosure and for the detailed report.

We have completed initial triage and agree that this requires a fix. Work is in progress, and we’ll continue coordinating details through the private email thread.

We appreciate you raising this with us responsibly. We’ll update this issue once the fix has been reviewed and made available.