Please report vulnerabilities privately to maintainers before public disclosure.
- Authentication and authorization
- Moderation controls and audit logs
- Data privacy and access control
- Bot/abuse prevention systems
- Initial acknowledgment: 48 hours
- Triage status: 7 days