Please do not open a public GitHub issue for a security vulnerability.

Report it privately via GitHub's private vulnerability reporting on this repository:

1. Go to the vilosource/vfkb Security tab.
2. Click Report a vulnerability.
3. Describe the issue, affected version(s), and reproduction steps if you have them.

This opens a private advisory visible only to maintainers and you, so the issue can be discussed and fixed before any public disclosure.

vfkb is pre-1.0. Only the latest published 0.x minor release is supported with security fixes. Older 0.x minors do not receive backports.

We aim to acknowledge new reports within a reasonable time and will keep you updated as the issue is triaged and (if confirmed) fixed. We do not currently offer a paid bug bounty.