Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them by emailing support@quarq.io. Include:

• A description of the vulnerability and its potential impact.
• Step-by-step reproduction instructions.
• Any proof-of-concept code or screenshots (if applicable).

You will receive an acknowledgement within 48 hours. We aim to triage and release a fix within 14 days for critical issues.