Security fixes are provided for the latest release on main and the active integration branch dev.

Please report vulnerabilities privately.

• Email: salunke.apurv7@gmail.com
• Subject: [SECURITY][tt-connect] <short summary>
• Include:
  • affected version/commit
  • reproduction steps
  • impact assessment
  • proof-of-concept (if available)

Do not open public issues for undisclosed vulnerabilities.

For financial-risk and usage liability notices, see DISCLAIMER.md.

• Initial acknowledgement: within 3 business days
• Triage decision: within 7 business days
• Fix timeline: depends on severity and complexity

1. We acknowledge and triage the report.
2. We validate impact and assign severity.
3. We develop and test a fix.
4. We release patched version(s) and publish advisories.
5. We credit the reporter unless anonymity is requested.