Leafdown is currently in alpha development. Security fixes are provided for the latest published release only.

Do not report suspected security vulnerabilities through public issues, discussions, or pull requests.

Use GitHub private vulnerability reporting to submit a confidential report.

Include, when possible:

• The affected Leafdown version
• The operating system and version
• A description of the impact
• Reproduction steps or a proof of concept
• Any suggested mitigations
• Whether the vulnerability has been disclosed elsewhere

Please avoid including unrelated personal files, document contents, credentials, tokens, or other sensitive information.

Leafdown is maintained by a single developer. Reports are reviewed as maintainer availability permits, and no response-time SLA is currently offered.

Please coordinate public disclosure until the report has been reviewed and a fix or mitigation has been made available.