If you discover a security vulnerability, please do not open a public issue.

Instead:

1. Prepare a clear description of the issue.
2. Include steps to reproduce the vulnerability.
3. Explain the potential impact.
4. Contact the maintainer privately.

We aim to acknowledge reports promptly and resolve confirmed vulnerabilities as quickly as possible.

CurseYou is designed as an offline procedural graphics engine.

The project:

• does not execute arbitrary user code,
• does not include remote code execution features,
• does not intentionally collect user data,
• performs local image processing and rendering.

Nevertheless, all bug reports and responsible disclosure are appreciated.