If you find a security issue in any Arc Forge Labs repository, report it privately.
- Use GitHub private vulnerability reporting: the repository's Security tab, then Report a vulnerability.
- Do not open a public issue, pull request or discussion about it.
- Include: steps to reproduce, the impact you saw, and a small proof if you can.
A repository with its own SECURITY.md uses that file instead of this one.