Portico is prerelease software. Security fixes are normally provided only in the newest release or development version. Older builds may not receive patches.

Please do not open a public issue for a suspected vulnerability.

Use GitHub's private vulnerability reporting feature from the Security tab of the affected Portico repository, or email admin@getportico.tv. Include:

• The affected version or commit.
• The operating system and installation method.
• Reproduction steps or a proof of concept.
• The likely impact.
• Any suggested mitigations.

Do not access other people's systems or data, degrade a service, or publish sensitive details while the report is being reviewed. Good-faith reports will be acknowledged as promptly as practical, but the project does not currently promise a formal response-time service level.

Operational details, credentials, personal information, access tokens, media filenames, and server addresses should be removed from logs before submission.