Security fixes are applied to the latest main branch.

Do not open public issues for vulnerabilities.

Send a private report to: polealpha@163.com

Please include:

• Affected component and version/commit.
• Reproduction steps or proof-of-concept.
• Expected impact and attack scenario.

We will acknowledge receipt within 3 business days and provide status updates until resolution.