This file applies to every repository in the corral-dev organization that does not carry its own SECURITY.md.

Please do not open a public issue for security vulnerabilities.

Use GitHub's private vulnerability reporting on the affected repository: open the Security tab and choose Report a vulnerability. Reports stay private until a fix is released.

请勿用公开 Issue 报告安全漏洞，请在受影响仓库的 Security 页面选择 Report a vulnerability 私下报告。

Only the latest release of each repository receives security fixes. Please upgrade and re-test before reporting.