The project currently supports the latest version on the main branch.

If you discover a security issue, please report it privately and responsibly.

Please email the maintainer at: security@clearnet.app

If that email is not yet active for your fork or deployment, open a private security advisory on GitHub or contact the project maintainer through the repository's preferred private channel.

Please do not open a public GitHub issue for security vulnerabilities.

When reporting, include:

• a clear description of the vulnerability
• steps to reproduce it
• the affected version or commit
• potential impact
• any suggested mitigation or fix

We aim to acknowledge valid reports within 5 business days and to provide a clear remediation plan when possible.

We ask reporters to allow a reasonable time for a fix to be developed and released before public disclosure. We will coordinate responsibly to avoid exposing users to unnecessary risk.