Please report vulnerabilities privately through GitHub: Security → Report a vulnerability on this repository (https://github.com/ergasterion-dev/kritolith/security/advisories/new).

Do not open a public issue, pull request, or discussion for security problems.

Include the affected version or commit, steps to reproduce, and the impact you expect. You should get an acknowledgement within 7 days.

Kritolith is pre-alpha. Only the latest commit on main receives fixes.