If you discover a security vulnerability in rslearn, please report it responsibly.

You can report it by:

• Opening a private issue (if enabled), or
• Contacting the maintainer directly via GitHub

Please do not publicly disclose the issue until it has been reviewed and resolved.

• You will receive an acknowledgment within a reasonable time (usually within a few days).
• The issue will be reviewed and confirmed if valid.
• If accepted, a fix will be prioritized and released as soon as possible.
• If the report is declined, you will still receive a clear explanation.

We appreciate responsible disclosure and your effort to improve the project’s safety.