Please do not open a public issue for a suspected vulnerability. GitHub private vulnerability reporting is not currently enabled for this repository. Contact the repository owner through @vincenzo-afk with a clear description, affected files or routes, reproduction steps, impact, and any suggested mitigation.

BrowserBrain treats the browser-only model boundary, browser storage, public URL reading and crawling, optional analytics, dependency supply chain, and deployment configuration as security-relevant. Do not include credentials, private notes, personal data, or sensitive target URLs in a report.

The project does not promise a response-time service-level agreement. Responsible disclosure gives the maintainer time to assess and address the issue before it is discussed publicly.