Do NOT create a public GitHub Issue for security vulnerabilities.

1. Go to the Issues page
2. Create an issue with the security label and mark it as private/confidential
3. Or contact the maintainer directly via GitHub: @Mukller

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if available)

• Initial response: within 7 days
• Fix release: within 30 days of confirmation

• Keep dependencies up to date
• Never commit secrets or credentials to version control
• Use environment variables for sensitive configuration
• Follow the principle of least privilege

We appreciate responsible disclosure of security issues. All valid reports will be acknowledged.

Thank you for helping keep this project secure! 🔐