Thanks for helping keep Koi safe.

Please do not open a public issue for a security vulnerability. Instead, report it privately through GitHub with:

• A description of the issue and its impact
• Steps or a small example that reproduces it
• The affected Koi version and operating system
• Any suggested fix, if you have one

You’ll receive an acknowledgement after the report is reviewed. Please allow time for a fix before sharing the vulnerability publicly.

Security fixes are made for the latest release. Older versions may not receive patches, so please update Koi before reporting an issue that might already be fixed.