Security updates are provided for the latest release and the main branch.

Please do not open public issues for security vulnerabilities.

Report vulnerabilities via GitHub Security Advisories: https://github.com/mstrhakr/network-list-sync/security/advisories/new

If you cannot use advisories, contact the maintainer directly and include:

• A clear description of the issue and impact
• Steps to reproduce or proof of concept
• Affected versions/commit if known
• Any suggested mitigation

• Initial acknowledgement: within 3 business days
• Triage and severity assessment: within 7 business days
• Fix timeline: depends on severity and complexity

We will coordinate disclosure timing with the reporter when possible.