Only the latest release branch is currently supported for security updates.

If you discover a security vulnerability in Synchro Nova, please report it responsibly.

1. GitHub Security Advisory: Submit a report via the Security Advisories tab. This creates a private disclosure channel directly with the maintainers.

2. Direct Contact: Alternatively, contact the project maintainer via GitHub profile: @Arean-Max.

To help us triage and reproduce the issue quickly, please include:

• Affected version or commit hash.
• Step-by-step reproduction instructions.
• Potential security impact (e.g., local privilege escalation, unexpected registry write, path traversal).
• Proposed fix or mitigation, if available.

• Security reports are triaged within 48 hours of receipt.
• Fixes will be prepared and released promptly before public disclosure.