None yet. marstack-cloud is pre-release, has no tagged releases, and should not run anything you care about.

Open a private security advisory through GitHub on this repository. Please do not open a public issue for a vulnerability.

Include what you did, what happened, and what you expected. A reproduction against a local single-node deployment is the most useful thing you can send.

See docs/SECURITY.md for the threat model, the invariants the code is expected to hold, and the scanners that run on every commit.