Security fixes are primarily applied to the latest release line.

Please do not open public issues for security vulnerabilities.

Use GitHub private vulnerability reporting:

• https://github.com/jixoai/openspecui/security/advisories/new

Include:

• Affected version/commit
• Reproduction steps or proof of concept
• Impact assessment
• Suggested mitigation (if available)

We will acknowledge reports as quickly as possible and coordinate a fix and disclosure process with the reporter.