Please report security issues through GitHub Security Advisory:

• https://github.com/logue/umd-core/security/advisories/new

Do not open public issues for unpatched vulnerabilities.

Please include:

• Affected version(s)
• Reproduction steps or proof of concept
• Impact assessment
• Suggested mitigation (if available)

Maintainers will:

1. Acknowledge receipt.
2. Assess severity and impact.
3. Prepare and release a fix.
4. Publish coordinated disclosure details after remediation.

This policy covers the Rust crate in this repository. External integrations and downstream deployments are handled by their respective maintainers.