Please do not open a public issue for a suspected vulnerability.

Report security issues through GitHub private vulnerability reporting. Include the affected version, reproduction steps, impact, and any suggested mitigation.

We will acknowledge the report as soon as practical, investigate it, and coordinate disclosure and a release when a fix is available.

Loom is pre-v1 software. Security fixes are provided for the latest released version; older releases may require upgrading.