If you believe you have found a security vulnerability in one of our repositories, please report it privately:

• Email security@tourpro.app (or info@tourpro.app)
• Or use "Report a vulnerability" on the repository's Security tab

Please include steps to reproduce, and avoid accessing or modifying other users' data.

We aim to acknowledge reports within 3 business days, and we credit researchers who follow coordinated disclosure. Our disclosure coordinates are also published at tourpro.app/.well-known/security.txt.

This policy applies to all repositories in the tourproapp organization unless a repository states otherwise.