If you have identified a potential security vulnerability in any official PeakURL repository, please submit a confidential report through our secure contact portal:

• Security Report Portal: Submit a Security Report

To facilitate prompt investigation and remediation, please provide the following information where available:

• A detailed description of the vulnerability and its potential impact.
• The affected repository, branch, version, or deployment context.
• Reproducible demonstration steps or a minimal proof-of-concept.
• Any suggested mitigations, patches, or remediation steps.

Upon receipt of a vulnerability report, project maintainers will execute the following procedure:

1. Acknowledgment: Confirm receipt of the disclosure within 48 business hours.
2. Assessment: Validate the vulnerability, determine its severity, and evaluate affected repositories.
3. Remediation: Develop, review, and test security patches across supported versions.
4. Coordinated Disclosure: Publish security releases through official distribution channels alongside appropriate remediation guidance.

This policy applies to all official repositories maintained under the PeakURL organization unless a repository specifies a distinct, project-specific security policy.