AIK8s projects often integrate container runtimes, Kubernetes clusters, credentials, browsers, sandboxes, and other security-sensitive systems. Please report vulnerabilities privately.

1. Open the affected repository's Security tab.
2. Use Report a vulnerability to submit a private security advisory when available.
3. Include the affected version, impact, reproduction steps, and any suggested mitigation.

Do not open a public issue for an unpatched vulnerability. If private vulnerability reporting is not available, contact the maintainers using the private contact method documented by the affected project before disclosure.

We will acknowledge a complete report as soon as practical, assess severity and affected releases, and coordinate remediation and disclosure with the reporter.

Each project documents its supported versions and deployment boundaries. Unsupported versions, intentionally unsafe example configurations, and vulnerabilities in upstream dependencies may be handled through the relevant upstream project, but reports that affect AIK8s integration or defaults are still welcome.