Security fixes are applied to the current main branch.

Use the repository's GitHub Security Advisory feature to report a vulnerability privately. Do not open a public issue containing credentials, private workplace communications, personal data, encryption keys, or exploit details.

Mindfront stores optional private data locally. A report involving vault encryption, key handling, source redaction, connector ingestion, or accidental artifact disclosure should include only synthetic reproduction data.