Do not open public issues for security-sensitive reports.
Please report privately via email: security@adoceditor.com (maintainers should replace this address).
Include:
- Affected area
- Reproduction details
- Impact assessment
- Suggested mitigation (if known)
- Acknowledge receipt within 7 days.
- Validate report and assess severity.
- Coordinate remediation and disclosure timeline with reporter.
Never include secrets, private credentials, or unredacted personal data in public issue reports.