Please report suspected vulnerabilities privately. Do not open a public GitHub issue or pull request.

Email admin@tsicoop.org with:

• A description of the issue and its impact.
• Steps to reproduce, or a PoC if available.
• The affected version/commit.

We aim to acknowledge reports within a reasonable timeframe and will work with you on a disclosure timeline once the issue is confirmed.

Security fixes are applied to the latest release. There is no long-term support for older versions; upgrading to the latest release is the recommended remediation path.