Enlumi is pre-1.0. Security fixes target the latest development revision; no long-term supported release series exists yet.
Use Security > Advisories > Report a vulnerability if private reporting is enabled on this repository. Otherwise, contact a maintainer through their GitHub profile. If necessary, ask for a private reporting route in an issue without disclosing exploit details or private logs.
Include affected commit, OS, reproduction steps, and a minimal sample when redistribution is permitted. Parser crashes without a security impact can use the normal bug-report template. Never attach credentials or private flight data.