If you discover a security vulnerability in crumbls/subscriptions-filament, please email security@crumbls.com rather than opening a public GitHub issue.

Include:

• A clear description of the vulnerability.
• Steps to reproduce.
• The affected version(s).

You'll get an acknowledgement within 72 hours, and we will coordinate a fix and disclosure timeline with you.

Only the latest 2.x release receives security patches.