TriHerm takes security reports seriously.

Please do not disclose suspected vulnerabilities in a public issue.

For a repository that has GitHub private vulnerability reporting enabled, use that channel. Otherwise, contact TriHerm through the official website at https://triherm.com and include the affected repository, a clear description of the issue, reproduction steps when available, and the potential impact.

Please allow reasonable time for investigation before public disclosure.

Project-specific security policies take precedence over this organization-wide default.