Please do not report security vulnerabilities through public GitHub issues.

Email us at: security@apexfuture.ai

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested mitigations

We will acknowledge receipt within 48 hours and aim to provide a fix or mitigation plan within 14 days.

• API authentication and authorization
• LLM prompt injection vulnerabilities
• Container escape or privilege escalation
• Sensitive data exposure

• Issues in third-party dependencies (report to the upstream project)
• Social engineering attacks
• Physical security