Security fixes are applied to the default branch of this repository and to the hosted app at https://app.treasuryguild.com.

Please report security vulnerabilities privately by email to andruzkas@gmail.com.

Do not open a public GitHub issue, discussion, or pull request for a suspected vulnerability.

Include enough detail to reproduce the issue (affected URL or code path, steps, and impact). You should get an acknowledgement within a few days; a fix or mitigation timeline depends on severity and complexity.