Mulberry is early-stage software. Security fixes are made on the default branch and released through the current Android, backend, and web deployment flows.

Please email security reports to:

subha60kundu@gmail.com

Include:

• A clear description of the issue.
• Steps to reproduce, proof of concept, or affected endpoint/component.
• The expected impact.
• Any logs, screenshots, or request samples that help confirm the issue.

Do not include real user data, production secrets, or credentials in the report. If sensitive evidence is necessary, describe it first and wait for coordination.

Please do not disclose vulnerabilities publicly until there has been reasonable time to investigate and ship a fix.