Do NOT file a public GitHub issue for security vulnerabilities.

Please open a private security advisory instead: 👉 https://github.com/KafKafrnZ/AI-Tutor/security/advisories/new

Include:

• A description of the vulnerability
• Steps to reproduce
• Potential impact assessment
• (Optional) Suggested fix

Expected response time: 72 hours to acknowledge receipt.

We will investigate, coordinate a fix, and arrange responsible disclosure before any public announcement. No PGP key is currently published — the GitHub advisory channel is the preferred contact method.