Please report security issues privately, never in a public issue:

• Open a private security advisory, or
• email support@keinsaas.com.

Include what you found, how to reproduce it, and what an attacker could do with it. We confirm receipt within three working days and keep you posted until it is fixed. We credit reporters in the release notes unless you prefer otherwise.

Security fixes go into the latest release on main. Copies made with the Deploy button receive them through the weekly update pull request (see Updating).