Security updates are applied to the latest release of Orbit.

I take the security of Orbit seriously. If you find a vulnerability in the compiler, runtime, or Kynx, please disclose it privately rather than opening a public issue.

1. Email findings: send details to security@orbit-lang.org.
2. Provide details: include reproduction steps, sample .orb code, OS details, and potential impact.
3. Response time: I aim to acknowledge quickly and keep you updated on patch status. I'm solo, so if it's a weekend it can take a bit longer - I don't leave reports unread.
4. Coordinated disclosure: please keep it confidential until a fix or advisory is out.

Thanks for helping keep Orbit secure - I read every report.