Please do not report security vulnerabilities through public GitHub issues.

Instead, email us at security@bridgelayer.dev with:

1. A description of the vulnerability
2. Steps to reproduce
3. Potential impact
4. Suggested fix (if any)

We will acknowledge your report within 48 hours and aim to release a fix within 14 days for critical issues.

We follow responsible disclosure practices and will credit reporters in the release notes unless you prefer to remain anonymous.