Please do not open a public issue for security reports.

Report privately to security@quelora.org. We aim to acknowledge within 5 business days.

Full policy (scope, expectations, disclosure):

👉 https://github.com/Quelora/quelora/blob/main/SECURITY.md