Piveo currently supports the latest commit on main for security fixes.

Please do not open public issues for sensitive vulnerabilities.

1. Preferred: GitHub private advisory
   • https://github.com/JamesbbBriz/Piveo/security/advisories/new
2. Optional email: security@piveo.ai (replace with your real address if used)
3. Include:
   • Affected component and version/commit
   • Reproduction steps
   • Impact assessment
   • Suggested mitigation (if available)

• Initial acknowledgment: within 72 hours
• Triage decision: within 7 days
• Patch timeline: based on severity and exploitability

After a fix is available, maintainers will publish:

• impact summary
• affected versions
• mitigation/upgrade instructions