Security fixes are applied to the latest release. The project is currently pre-1.0, so users should update to the newest version before reporting an issue.

Use GitHub's private vulnerability reporting for this repository. Include:

• The affected version or commit
• The impact and conditions required to reproduce it
• A minimal proof of concept, if available
• Any suggested mitigation

Do not disclose exploitable details in a public issue. If private vulnerability reporting is temporarily unavailable, open a public issue requesting a private contact channel without including sensitive details.

The maintainers will acknowledge a report, assess its scope, and coordinate a fix and disclosure timeline with the reporter.

Model output quality, prompt injection, and unsafe actions implemented by application-provided tool callbacks are not vulnerabilities in the inference runtime by themselves. Reports involving memory safety, malformed GGUF input, dependency or build integrity, or unintended file access are in scope.