Please do not open a public issue for security vulnerabilities.

Instead, use GitHub's private vulnerability reporting: go to the Security tab and click "Report a vulnerability". This opens a private advisory visible only to the maintainer.

You can expect an initial response within a week. Please include a description of the issue, steps to reproduce, and the affected version or commit if known.

F-Mesh is under active development and not yet used in production. Security fixes land on main and are included in the next release; older releases are not patched.