Security fixes are applied to the latest release line.
Please report vulnerabilities privately to:
Do not open public issues for security disclosures.
- Initial acknowledgment within 48 hours
- Triage and severity assessment within 7 days
- Coordinated disclosure timeline agreed with reporter
Public-facing security and privacy guidance is published at docs.vaner.ai/security.