If you discover a security vulnerability in Buddi, please do not create a public issue or pull request.

Instead, report it via GitHub Private Vulnerability Disclosure.

We will review your report and respond as soon as possible. You may be asked to provide additional details or help verify a fix.

We aim to acknowledge reports within 5 business days and coordinate disclosure within 90 days.