gogpu/gg-svg is currently in early development (v0.x.x).

DO NOT open a public GitHub issue for security vulnerabilities.

Instead, please report security issues via:

1. Private Security Advisory (preferred): https://github.com/gogpu/gg-svg/security/advisories/new

2. GitHub Discussions (for less critical issues): https://github.com/gogpu/gg-svg/discussions

• Description of the vulnerability
• Steps to reproduce
• Affected versions
• Potential impact

• Initial Response: Within 72 hours
• Fix & Disclosure: Coordinated with reporter

gogpu/gg-svg is an SVG generation library. Security considerations:

1. File System — SaveToFile writes to specified paths
2. XML Injection — Text content is properly escaped
3. Memory — Large canvases allocate significant memory

• GitHub Security Advisory: https://github.com/gogpu/gg-svg/security/advisories/new
• Public Issues: https://github.com/gogpu/gg-svg/issues

Thank you for helping keep gogpu/gg-svg secure!