Please do not report security vulnerabilities through public GitHub issues.

Use GitHub private vulnerability reporting if available, or contact the maintainer privately with:

• Affected component or URL
• Reproduction steps
• Impact summary
• Suggested fix, if known

Security reports are welcome for:

• apps/web
• apps/api
• apps/webhook
• packages/shared
• Build and deployment configuration

Please avoid accessing, modifying, or exfiltrating data that does not belong to you.