Security fixes are made on the latest main branch and shipped in the latest release on npm. Older releases are not patched; please upgrade to the latest version.

Please do not open a public issue for security problems.

Report it privately through GitHub Security Advisories: https://github.com/aimanmalib/hermes-memory-engine/security/advisories/new

Include what you found, how to reproduce it, and the affected version. You should get a first response within a few days. Once a fix is released, the advisory will be published with credit to the reporter unless you ask otherwise.