If you discover a security issue in puru, please report it privately.

Do not open a public issue.

Email danilomopedrosa@gmail.com with:

• A description of the vulnerability
• Steps to reproduce
• Impact assessment (if known)

You should receive a response within 48 hours. Once confirmed, a fix will be prepared as quickly as possible, and you will be credited in the release notes unless you prefer to remain anonymous.