Aster 0.1 is a reference candidate and is not production-authorized. No released version currently receives a production security-support commitment.

Do not report suspected vulnerabilities, credentials, mission data, packet captures, or deployment details in a public issue. Use GitHub private vulnerability reporting when it is enabled for the repository. Otherwise, contact the repository-owning organization's security team through its private security channel.

Include the affected version or commit, impact, reproduction conditions, and a minimal non-sensitive proof of concept. Maintainers should acknowledge a report privately before discussing disclosure timing or remediation publicly.