Report vulnerabilities privately by emailing dev@uinaf.dev. Do not disclose suspected vulnerabilities in public issues.
- Affected package or path
- Clear reproduction steps
- Impact assessment
- Any suggested mitigation
Reports are triaged as quickly as possible.