If you discover a security issue, please do not open a public issue with exploit details.

Instead, share:

• A clear description of the issue
• The affected page, route, or feature
• Reproduction steps
• The impact you observed
• Any suggested fix or mitigation

If you do not yet have a dedicated security contact method, create one before announcing the repository publicly and update this file with the correct private reporting channel.

OceanGuard is currently maintained as a single active development branch. Security fixes are expected to land on main.