Please report suspected vulnerabilities through GitHub's private vulnerability reporting for this repository. Do not include production credentials, environment files, customer data, or live exploit payloads in a public issue.

Security reports should include the affected commit or release, the threat prerequisites, a minimal reproduction against disposable infrastructure, and the expected impact.

Only the latest released major version receives security fixes. Until the first public release, use the exact reviewed commit deployed by the Hookroute integration.