CandGuard maintains security updates for the current active release line:

We take the security of CandGuard seriously. If you discover a security vulnerability, please do not disclose it in a public issue, pull request, or discussion.

Please report security vulnerabilities privately via GitHub Private Vulnerability Reporting:

• Navigate to the repository's Security tab.
• Click Report a vulnerability to open a draft security advisory.
• Alternatively, visit: https://github.com/krishika08/candguard/security/advisories/new

To help us triage and resolve the issue quickly, please provide:

1. A description of the vulnerability and its potential impact.
2. Steps to reproduce the issue (including sample CSV/TSV fixtures if applicable, ensuring no private or sensitive data is included).
3. The CandGuard version, Python version, and operating system where the vulnerability was observed.
4. Any potential mitigations or suggested fixes.

• We will acknowledge receipt of your report within 48 hours.
• We will coordinate a fix in a private branch or fork.
• Once a fix is verified and ready for release, we will release a patch release and publish an advisory crediting the reporter (unless anonymity is requested).