If you discover a security vulnerability in RbSplash, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please email the maintainer directly with:

1. Description of the vulnerability
2. Steps to reproduce
3. Potential impact
4. Suggested fix (if any)

You can expect an initial response within 48 hours. A fix will be prioritized based on severity.

Once a fix is released, a public advisory will be published crediting the reporter (unless anonymity is requested).