I take the security of these projects, and the confidentiality of any data they touch, seriously, and I welcome coordinated disclosure.

Please report privately, do not open a public issue:

• Use GitHub Private vulnerability reporting on the affected repository (Security → Report a vulnerability), or
• Email security@mhsbsolutions.com.

Include the affected repo + version/commit, impact, and reproduction steps. Do not include real client, matter, or personal data.

• Acknowledgement within 3 business days; assessment within 10.
• Coordinated disclosure, with credit if you wish, targeting a fix within 90 days of triage.

Good-faith research that avoids privacy violations and service degradation, and gives a reasonable chance to remediate before disclosure, will not be pursued.