If you discover a security vulnerability in this project, please report it to us as soon as possible. We appreciate your efforts to responsibly disclose your findings.

To report a vulnerability, please email security@medmakers.io with the following information:

• A description of the vulnerability
• Steps to reproduce the issue
• Possible impacts of the vulnerability
• Any potential mitigations you've identified

We are committed to the following response targets:

• Initial response: Within 48 hours
• Confirmation of the issue: Within 5 business days
• Resolution timeframe: Varies depending on the complexity of the issue

We follow a coordinated disclosure process:

1. Once a security report is received, we will work diligently to validate the issue.
2. We will prepare fixes for all supported versions of the project.
3. We will notify the reporter when we are ready to publish the fix.
4. We will release the fix and publicly disclose the issue.

This security policy applies to the latest version of our main branch.

Thank you for helping to keep our project and our users secure!