Security fixes are applied to the latest release on the main branch.
Do not open a public issue for vulnerabilities.
Report privately to: security.tab.ai.pilot@gmail.com
Include:
- Vulnerability description
- Reproduction steps
- Impact assessment
- Any known mitigation
Response targets:
- Acknowledge within 48 hours
- Initial triage within 7 days
- Status updates until resolution
Please allow time for investigation and fix rollout before public disclosure. Coordinated disclosure is preferred.