RichGraph is a research storage engine and has not undergone a security audit. Do not expose benchmark binaries or database directories to untrusted input.

Until a public issue tracker and private disclosure address are selected, security reports should be sent privately to the project maintainers rather than posted with exploit details. Maintainers should acknowledge a report, reproduce it on the supported branch, and coordinate a fix before disclosure.

Only the latest tagged stabilization release is intended to receive security fixes. No release is currently designated as supported.