Please do not open public issues for suspected credential leaks, authentication bypasses, or other security vulnerabilities.

Email the maintainers at hello@zerogpu.ai with:

• A short description of the issue.
• Reproduction steps or a proof of concept.
• Affected versions, commits, deployments, or URLs if known.
• Whether credentials, logs, or user data may be exposed.

We will acknowledge reports within 72 hours and coordinate a fix before publishing details.

Never commit real ZeroGPU API keys, Cloudflare tokens, or Worker secrets.

The public examples in this repository use placeholders such as <your-api-key>. Runtime credentials should be supplied through the zerogpu CLI login, local environment variables, GitHub Actions secrets, or Cloudflare Worker secrets.

Security fixes are made against the latest released version and the default development branch.