The receiving repository's security policy and supported-version information take precedence over this organization fallback. No organization-wide support window or response-time guarantee is established here.

Do not post exploit details, credentials, private data or vulnerable private source in a public issue. If the receiving repository exposes Security → Report a vulnerability, use that private reporting path. Its availability is repository-specific; this file does not enable it.

If no private reporting path is available, ask the receiving repository's maintainers for a private contact through an existing repository interaction, without disclosing the sensitive details. No organization-wide email address, paid support service or bounty program is promised.

Share a minimal sanitized reproduction only through the agreed channel. Do not access another person's data or systems to demonstrate a report.