WebEncode follows a rolling support model on main.

Please do not open public issues for suspected vulnerabilities.

1. Open a private security advisory via GitHub Security Advisories: https://github.com/rennerdo30/WebEncode/security/advisories/new
2. Include:
   • Affected component(s)
   • Reproduction steps or proof-of-concept
   • Impact assessment
   • Suggested remediation (if known)

You can expect an initial response within 3 business days.

• We validate and triage reported vulnerabilities.
• We prepare and test a fix.
• We coordinate disclosure timing with the reporter when possible.
• We publish a security advisory and release notes after remediation.