Please report suspected vulnerabilities privately via GitHub's private vulnerability reporting — not in public issues. The live deployment at www.hyperspacevault.com always runs the latest promoted commit; only that version is supported. This is a non-commercial fan project — there is no bug bounty, but reports are read and acted on.