Please do not open a public issue for a suspected vulnerability.

Use GitHub's private vulnerability reporting for this repository. Include the affected version, impact, reproduction steps, and any known mitigation. Do not include real secrets, private repository contents, or personal Memex data.

The runtime threat model, storage boundaries, connector rules, redaction guarantees, and unsupported trust assumptions are documented in plugins/memex/SECURITY.md. Privacy and retention behavior is documented in plugins/memex/PRIVACY.md.

Only the latest released version receives security fixes.