Do not open a public GitHub issue for security reports.
Please report privately using GitHub Security Advisories.
Include:
- affected files or APIs
- commit SHA
- reproduction steps
- impact
- any known mitigation
This project stores vectors and serialized indexes. Reports involving out-of-bounds access, memory unsafety, or unsafe deserialization of VF01/VH01 payloads are in scope.