Please do not open a public issue for a suspected vulnerability.
Use GitHub's private vulnerability reporting feature on the affected repository when it is available. Otherwise, contact Epiphany Dynamics through the contact form at https://epiphanydynamics.ai/contact/ and include:
- The affected repository and version or commit
- Steps to reproduce the issue
- The impact you observed
- Any suggested mitigation
Do not include live credentials or private customer data in the report.
Reports about code maintained by Epiphany Dynamics are in scope. Third-party services, social engineering, denial-of-service testing, and systems not owned by Epiphany Dynamics are out of scope.
We will acknowledge a usable report, investigate it, and coordinate disclosure after a fix is available. Response and remediation times depend on severity and reproducibility.