Until GalaxyQuest publishes versioned releases, security fixes are made against the latest commit on the default branch. The project is not yet production-ready; see the production-readiness roadmap.

Please do not report suspected vulnerabilities in public issues, discussions, or pull requests. Use GitHub's private vulnerability reporting when it is enabled for this repository. Otherwise, contact the repository maintainers privately through GitHub and request a confidential security reporting channel.

Include the affected component and version or commit, reproduction steps, potential impact, and any suggested mitigation. Avoid including real user data or live credentials in the report.

The maintainers will acknowledge receipt, investigate the report, and coordinate a fix and disclosure timeline with the reporter. Please allow time for a fix before publishing details.