metabeam parses untrusted files, so memory-safety and denial-of-service issues are taken seriously. If you find a vulnerability, please report it privately rather than opening a public issue.
Use GitHub's private vulnerability reporting (the "Report a vulnerability" button under the Security tab) or email the maintainers. We aim to acknowledge reports within a few days and to ship a fix promptly once confirmed.
Please include:
- The file type and a minimal sample that triggers the issue, if possible
- The observed behavior (crash, hang, excessive memory use)
- The metabeam version (
metabeam --version)
The core parsing library is the primary concern. A malformed input file should never cause a panic, an infinite loop, or unbounded memory growth. Reports of any such behavior are in scope.