Report vulnerabilities privately to info@mmt.dev. Do not open a public issue for security reports.

We aim to acknowledge critical reports within 48 hours.