QXYCell is currently an alpha release. Security fixes are provided for the latest 0.1.x release only.

Please report suspected vulnerabilities privately by emailing jason.madore@sydney.edu.au. Do not open a public issue for an undisclosed vulnerability and do not include patient, research-participant, credential, or other sensitive data in the report.

Include the affected version, reproduction steps, potential impact, and any suggested mitigation. You can expect an acknowledgement within five business days. Confirmed vulnerabilities will be coordinated privately until a fix and responsible disclosure timeline are agreed.