At this stage, security fixes are applied to the latest code on the default branch.

Please do not open public issues for suspected vulnerabilities.

Report security issues privately to:

• Email: [email protected] (replace with real address)

Include the following:

1. Vulnerability type and impact
2. Steps to reproduce
3. Affected files, endpoints, or components
4. Proof of concept (if available)
5. Suggested fix or mitigation (optional)

1. Initial acknowledgment within 72 hours
2. Triage and severity classification
3. Fix development and validation
4. Coordinated disclosure and release notes

• Do not include real user data in reports.
• Use sanitized logs or minimal examples.
• Do not exploit vulnerabilities beyond what is needed for proof.

Thank you for helping keep MindSpace and its users safe.