We take the security of mathlib-fp seriously. If you believe you have found a security vulnerability, please report it to us as described below.

Do not include vulnerability details in a public GitHub issue.

Submit a private vulnerability report. If that form is unavailable, open a minimal public issue asking for maintainer contact without including vulnerability details.

You should receive a response within 48 hours. If for some reason you do not, please follow up to ensure we received your original message.

Please include the following information:

• Type of issue (for example, memory corruption or unsafe numerical behaviour)
• Full paths of source files related to the issue
• Affected tag, branch, commit, or direct source URL
• Any special configuration required to reproduce the issue
• Step-by-step reproduction instructions
• Proof-of-concept code, if available
• The impact and how the issue might be exploited

We prefer all communications to be in English.