Only the latest commit on the main branch receives security fixes.

Please do not open a public issue for security problems.

Instead, use GitHub's private vulnerability reporting: https://github.com/Aphelion-Research/Azar/security/advisories/new

We aim to acknowledge reports within 5 business days and will coordinate disclosure timelines with the reporter.

Azar is a research simulator. It does not execute trades, manage accounts, or handle market credentials. Reports related to simulation logic, data handling, or dependency vulnerabilities are in scope.