Please do not disclose exploitable vulnerabilities through public GitHub issues, pull requests, or discussions.

Once private vulnerability reporting is enabled for this repository, use GitHub's private vulnerability reporting channel. Until then, contact a repository maintainer through an existing private channel. Do not include credentials, tokens, or sensitive customer data in any report.

Reports should describe the affected component, reproduction conditions, impact, and any suggested mitigation. flowOS does not promise a response-time SLA; reports are assessed according to severity and impact.