Forgeng is deployed continuously from the main branch. Only the latest version running in production is supported with security fixes.

Please do not report security vulnerabilities through public GitHub issues.

Instead, email code@radcrew.org with:

• A description of the vulnerability and its potential impact
• Steps to reproduce, including any proof-of-concept code
• The affected component (frontend, backend, infrastructure, etc.)

We'll acknowledge your report within 3 business days and aim to provide a timeline for a fix after initial triage. We'll keep you updated as we work on a resolution and credit you in the fix (unless you'd prefer to stay anonymous).

Please give us a reasonable amount of time to address the issue before any public disclosure.