Do not report suspected vulnerabilities in a public issue. Use GitHub's private vulnerability reporting for this repository. If that channel is unavailable, contact the FernoLabs organization maintainers privately through GitHub.

Include the affected component, impact, reproduction steps, and any suggested mitigation. Please avoid accessing data that is not yours or disrupting public services while investigating.

Blockzilla is pre-1.0. Security fixes are applied to the latest main branch; older snapshots and generated deployment bundles are not supported.