Security

SECURITY.md

Security Policy

Reporting a Vulnerability

Report security vulnerabilities privately to methodwhite@proton.me.

Do not open public issues for security vulnerabilities.

Scope

Unsafe deserialization in loaders
Arbitrary code execution via crafted binaries
Memory safety issues
Exposure of sensitive data in logs

Response

Acknowledgment within 48 hours
Fix timeline depends on severity

There aren't any published security advisories