Security fixes are provided for the latest released version line.

Please do not open public GitHub issues for security vulnerabilities.

Report privately by email:

• security@agentplane.dev

Include:

• A clear description of the issue and impact
• Steps to reproduce (minimal, deterministic)
• Affected versions and environment
• Any suggested remediation

• Initial acknowledgement: within 3 business days
• Triage update: within 7 business days
• Remediation plan or status update: as soon as impact is confirmed

After a fix is available, maintainers will coordinate responsible disclosure and release notes.