If you believe you have discovered a security vulnerability, please report it responsibly so we can investigate and address the issue as quickly as possible.

Please send vulnerability reports through our designated security contact or reporting channel. When submitting a report, please include as much relevant information as possible, including:

• A clear description of the vulnerability.
• The affected component, feature, or version.
• Steps to reproduce the issue.
• The potential security impact.
• Proof-of-concept code or screenshots, if applicable.
• Any relevant logs or technical details.

Please do not publicly disclose the vulnerability before we have had an opportunity to investigate and address it.

We aim to acknowledge vulnerability reports within 3 business days and will provide updates as our investigation progresses.

After reviewing the report, we may:

• Confirm and investigate the vulnerability.
• Request additional information or clarification.
• Determine that the issue is not a security vulnerability.
• Determine that the issue has already been reported or addressed.
• Accept the report and work on a fix or mitigation.

If the vulnerability is accepted, we will work to resolve it as soon as reasonably possible based on its severity and complexity. We may provide additional updates regarding the progress of the fix.

If a report is declined, we will provide an explanation when possible.

We ask security researchers to act responsibly and avoid accessing, modifying, deleting, or exposing data that does not belong to them. Please do not perform actions that could disrupt our services or negatively affect other users.

Thank you for helping us improve the security and reliability of our project.