Please report vulnerabilities privately via GitHub security advisories. No bug bounty; reports are appreciated and credited.

What sling does and does not claim is documented honestly in SCOPE.md § Security posture.