Do not open a public issue for a suspected vulnerability or a report that may expose private Blender files, paths, credentials, or proprietary assets.

Please submit a private report through GitHub Security Advisories. Include the affected BoneWeaver and Blender versions, reproduction steps, impact, and the smallest safe evidence you can share. You may redact asset names and paths. The maintainer will acknowledge the report and coordinate disclosure through the advisory.