Security fixes are applied to the latest published release first.

Please do not open public issues for suspected vulnerabilities.

Report privately by emailing: security@quickthink.dev

Include:

• A short description of the issue.
• Steps to reproduce.
• Potential impact.
• Any suggested mitigation.

• Initial acknowledgement: within 3 business days.
• Triage update: within 7 business days.
• Remediation timeline: shared after triage.

After a fix is available, maintainers may publish a security advisory with affected versions and upgrade guidance.