We take the security of EcoTask seriously. If you believe you have found a security vulnerability, please do not open a public issue.

Instead, report it privately by emailing the project maintainers or opening a draft security advisory on GitHub:

1. Go to https://github.com/ecotask-network/EcoTask-backend/security/advisories
2. Click "New draft security advisory"
3. Fill in the details

You should receive a response within 48 hours. If the issue is confirmed, we will release a patch as soon as possible.

When a vulnerability is reported, we will:

• Confirm receipt within 48 hours
• Provide an estimated timeline for a fix
• Notify reporters when the fix is deployed
• Credit reporters (with consent) in the release notes

We prefer all communications to be in English.