Security fixes are applied to the main branch.

Please do not open public GitHub issues for undisclosed security findings.

Use GitHub Private Vulnerability Reporting for this repository: https://github.com/Prekzursil/SWFOC-Mod-Menu/security/advisories/new

If private advisory reporting is unavailable, contact the maintainer privately on GitHub (@Prekzursil).

When reporting, include:

• the affected component, file, workflow, or dependency
• the exact commit, branch, or release if known
• clear reproduction or proof-of-concept steps
• impact details covering confidentiality, integrity, or availability
• any suggested mitigation if known

• Initial acknowledgment: best effort within 3 business days.
• Triage update: best effort within 7 business days.
• Coordinated disclosure is expected; please allow time to investigate and patch before public disclosure.