Please report suspected vulnerabilities privately to info@spectrumsimulations.com. Include reproduction steps, the affected version, and the likely impact. Do not send passwords, tokens, or private photographs. Avoid posting exploit details in public issues before the report has been reviewed.
Reports should target the latest published version. No response-time or support guarantee is implied.