CortexFault is pre-1.0. Security fixes are applied to the latest release and the main branch.

Please do not open a public issue for a suspected vulnerability. Use the repository's Security tab to submit a private vulnerability report. Include the affected version, input or command needed to reproduce the problem, impact, and any proposed mitigation.

Do not include production firmware, secrets, customer dumps, or personally identifiable data. A minimized synthetic reproducer is preferred.

CortexFault is designed to process untrusted text and JSON locally. It does not make network requests. ELF symbolization launches an addr2line executable selected from PATH or supplied explicitly by the user. Use a trusted toolchain and trusted ELF file.

HTML output escapes parsed text, but reports can contain firmware addresses and source paths. Review them before sharing outside the development team.