Thank you for taking the time to responsibly disclose security vulnerabilities in this repository.

Preferred reporting

• If possible, please open a private GitHub Security Advisory for this repository: https://github.com/isinghabhishek/java-dsa-algorithms/security/advisories
• If you cannot use the GitHub security advisory workflow, please contact the maintainers using the email address listed on the repository owner's GitHub profile.

What to include Please include the following information in your report to help us triage and fix the issue quickly:

• Affected versions (commit, tag, or branch)
• A clear description of the vulnerability and its impact
• Step-by-step reproduction steps and a minimal proof-of-concept (PoC) if available
• Any exploit code, sample input, or test cases that demonstrate the issue
• Suggested mitigations or fixes (optional)
• Your contact information and whether we may contact you for follow-up

Encryption If you need to send sensitive information (for example, exploit code or PoC that shouldn't be public), please encrypt it using the maintainer's PGP key. If a PGP key is not available on the maintainer's GitHub profile, please use the GitHub Security Advisory private reporting flow instead.

Our process and timeline

• Acknowledgement: We will acknowledge receipt of a valid report within 72 hours.
• Triage: We will triage the report and provide an initial response with an estimated timeline within 7 calendar days.
• Fix and disclosure: We aim to produce a fix or mitigation as soon as possible. For coordinated disclosure, we typically follow a 90-day disclosure timeline from the date of acknowledgement, unless a shorter or longer timeline is agreed with the reporter.
• CVE assignment: We will coordinate CVE assignment for issues of sufficient severity.

Out-of-scope

• Reports that are purely about code style, maintainability, or performance are welcome as issues but are not treated as security vulnerabilities unless they result in a security impact.

Acknowledgements With your permission we may publicly acknowledge contributions and credit researchers who help responsibly disclose security issues. If you prefer to remain anonymous, please tell us in your report.

Thank you We appreciate responsible disclosure and will work to resolve any confirmed issues promptly.