If you discover a security vulnerability in QueryRouter++, please report it privately to:

Gabriel Rance
📧 gabriel.rance@ensam.eu

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

We will acknowledge receipt within 48 hours and provide a more detailed response within 7 days, including next steps for addressing the issue.

Please do not publicly disclose the vulnerability until we have had a chance to address it. We will coordinate with you on the disclosure timeline.

QueryRouter++ does not currently offer a bug bounty program.