If you discover a security vulnerability:

1. Do not disclose publicly
2. Email [email protected] with details
3. Include steps to reproduce and potential impact
4. You'll receive a response within 48 hours

1. Confirmation: We'll confirm receipt within 48 hours
2. Assessment: We'll evaluate the vulnerability
3. Fix: If accepted, we'll develop a fix
4. Disclosure: After fixing, we'll publish an update with credit to you (if desired)