Please do NOT report security vulnerabilities through public GitHub issues.

If you discover a security vulnerability, please report it responsibly by:

1. Emailing the maintainers directly at: security@healthtech.dev
2. Include a clear description of the vulnerability
3. Include steps to reproduce it
4. Include the potential impact

You will receive a response within 48 hours acknowledging your report.

We will work with you to understand and resolve the issue as quickly as possible.

• Authentication or authorization flaws
• Data exposure or leakage
• Cross-site scripting (XSS)
• SQL injection or database vulnerabilities
• Any vulnerability that could compromise user data

We take security seriously and appreciate responsible disclosure. Contributors who report valid vulnerabilities will be credited in our release notes.