Email contact@antfly.io with the subject Security vulnerability report. Include the affected version or commit, deployment configuration, reproduction steps, and observed impact. Please report vulnerabilities privately rather than opening a public issue. Do not include real credentials or sensitive customer data in a reproduction.

We will investigate the report and coordinate disclosure with you.

For deployment guidance, see Secure Deployment.