Security fixes are prioritized for the latest stable Harbor release and the current main branch.

Please do not open a public issue for security vulnerabilities.

Use GitHub's private vulnerability reporting flow from the repository Security tab:

1. Open the Harbor repository on GitHub.
2. Go to Security.
3. Choose Report a vulnerability.

Include as much detail as you can safely share:

• affected Harbor version or commit
• macOS version
• steps to reproduce
• expected and actual behavior
• logs, screenshots, or sample files if they do not contain sensitive data

I will acknowledge valid private reports as soon as practical, triage the impact, and coordinate a fix before public disclosure when appropriate.