Report security vulnerabilities through GitHub Security Advisories. Do not include exploit details, private keys, device identifiers, or vulnerable binaries in public issues.

The report should include the affected MakoSU version, Android/kernel environment, a minimal reproduction, impact assessment, and any mitigation already tested. Signing keys and release credentials must never be attached to a report or committed to the repository.