Security updates are provided for the latest stable release of KLineChart. Please upgrade to the latest version before reporting an issue or requesting a fix.

Please do not disclose suspected vulnerabilities in public issues, discussions, pull requests, or other public channels.

Report vulnerabilities privately through GitHub Security Advisories. Include as much of the following information as possible:

• The affected version and environment
• A description of the vulnerability and its potential impact
• Reproduction steps or a minimal proof of concept
• Any known mitigations or suggested fixes
• Whether the vulnerability has been disclosed elsewhere

You should receive an acknowledgement within 3 business days and an initial assessment within 7 business days. Resolution time depends on severity and complexity. We will keep you informed of material progress and coordinate public disclosure after a fix or mitigation is available. If a report is not accepted, we will explain why when possible.

Please act in good faith, avoid accessing or modifying data that is not your own, and give maintainers reasonable time to investigate and remediate the issue before public disclosure.

This policy covers the source code and official release artifacts maintained in this repository. Vulnerabilities in third-party dependencies should normally be reported to the relevant upstream project, unless they create a vulnerability specific to KLineChart.