Do not disclose suspected vulnerabilities in a public issue.
Use the private llmsmap contact form and begin the subject with SECURITY:.
Reveal the fallback email address
hello [at] llmsmap [dot] me
Include the affected endpoint, reproduction steps, impact, and relevant request or response identifiers. Do not include personal data, access tokens, private submission status tokens, API keys, or production database content.
This public repository contains distribution metadata only. Reports concerning the private application implementation should still use the same private channel.