Security fixes are provided for the latest released version of ORC Torrent.

Before reporting a vulnerability, confirm that it still affects the latest release.

Please report suspected security vulnerabilities privately by emailing contact@orclabs.io. Do not open a public GitHub issue for an undisclosed vulnerability.

Include as much of the following information as possible:

• A clear description of the vulnerability and its potential impact.
• The affected ORC Torrent version, operating system, and architecture.
• Reproduction steps or a minimal proof of concept.
• Relevant logs, screenshots, or configuration details with secrets removed.
• Any suggested mitigation or fix.

You will receive an acknowledgement after the report has been reviewed. We will work with you to validate the issue, determine its severity, and coordinate remediation and disclosure. Please allow a reasonable investigation period before publishing details.

If the report is not security-sensitive, use the repository's regular GitHub issue tracker instead.