If you discover a security vulnerability in this repository, please report it privately rather than opening a public Issue — this gives time to fix the problem before it becomes public knowledge.

Send an email to f.rombaldoni@campus.uniurb.it with:

• A description of the vulnerability and its potential impact
• Steps to reproduce it, if possible
• Any relevant logs, screenshots, or proof-of-concept code

Examples of what to report this way (rather than as a public Issue): exposed credentials or secrets, authentication/authorization bypass, injection vulnerabilities (SQL, command, etc.), cross-site scripting (XSS), data exposure, or vulnerable dependencies with a known exploit.

This is a personal, unpaid open source project maintained in spare time — there is no bug bounty program and no guaranteed response time, but security reports will be looked at as a priority over regular Issues. You'll get an acknowledgement once the report has been reviewed, and credit in the fix (unless you'd prefer to stay anonymous).

Unless stated otherwise in this repository, only the latest version/release is supported with security fixes.