Only the latest version on the master branch is actively supported with security fixes. Older commits and branches may contain known vulnerabilities and should not be used in production.

Please do not report security vulnerabilities in a public issue.

Use GitHub's private vulnerability reporting for this repository:

https://github.com/cocor-tech/moistello-frontend/security/advisories/new

Include the affected commit or version, a clear description of the impact, reproduction steps, and any proof of concept needed to validate the report. Please redact credentials, personal data, and live wallet secrets before submitting.

If private vulnerability reporting is unavailable, contact the repository maintainers through a private GitHub security advisory request and include the same details.

• We acknowledge reports within 3 business days.
• We provide an initial severity assessment within 7 business days.
• We coordinate a fix, disclosure timeline, and credit with the reporter when appropriate.

Please allow reasonable time for remediation before public disclosure.