Please do not open public issues for security vulnerabilities.
Report privately via:
- Email: security@mazuryk.dev
Include:
- Affected component/path
- Reproduction steps
- Potential impact
- Suggested mitigation (if known)
- Initial acknowledgment: within 3 business days
- Triage decision: within 7 business days
- Fix timeline: depends on severity and complexity
This policy applies to all code in this repository, including frontend, backend, and CI configuration.