Security fixes are considered for the latest published release on the default branch unless a commercial agreement says otherwise.

Please report vulnerabilities privately via GitHub Security Advisories on theworker02/chimera or by contacting @theworker02.

Include reproduction steps, affected versions, and impact. Do not open a public issue for undisclosed vulnerabilities.

Allow reasonable time for a fix before public disclosure. Commercial licensees may have separate support channels defined in their agreement.