Please do not open a public issue for a suspected vulnerability or for information that could expose a real system, credential, or customer.
Email peter@tier9ai.com with:
- the affected repository and version or commit;
- a concise description of the issue and its potential impact;
- reproduction steps or a proof of concept, when safe to share; and
- any suggested mitigation.
We will acknowledge a complete report as soon as practical and coordinate remediation and disclosure based on severity. Public reference implementations are maintained on a best-effort basis and should be independently reviewed before production use.