If you discover a security vulnerability in this project, please report it privately by opening a private vulnerability report at:

https://github.com/enihcam/opencode-webmcp/security/advisories/new

We will acknowledge receipt within 48 hours and work with you to understand and resolve the issue promptly.

Please do not report security vulnerabilities via public GitHub issues, discussions, or pull requests.