We take security issues in CodeDNA seriously. We appreciate your efforts to responsibly disclose your findings.

Please do NOT report security vulnerabilities via GitHub Issues.

Instead, please report them by opening a GitHub Security Advisory directly in this repository.

You should receive a response within 48 hours. If the issue is confirmed, we will:

1. Work on a fix as quickly as possible
2. Release a patched version
3. Credit the reporter in the release notes (unless you prefer to remain anonymous)

To help us triage and fix the issue quickly, please include:

• A description of the vulnerability and its potential impact
• Steps to reproduce the issue
• Your recommended fix (if any)
• Your GitHub username or email for follow-up

Thank you for helping keep CodeDNA safe!