OpenAIDE is currently alpha software. Security fixes are applied to main and the latest published alpha; older alpha builds are not maintained.

Do not open a public issue for a suspected vulnerability. Use GitHub's private Report a vulnerability flow in the repository Security tab. Include affected versions, reproduction steps, impact, and any suggested mitigation.

Do not include real credentials, private task history, workspace contents, or unredacted diagnostics. Maintainers will acknowledge a report through the private advisory and coordinate disclosure after a fix is available.