We release security fixes for the latest stable release. Pre-release versions (alpha/beta) may receive fixes at our discretion.

If you believe you have found a security vulnerability, please report it privately.

Email: jagadishmail@gmail.com
Subject: TeaLeaf Security Report

Please include:

• A clear description of the issue
• Steps to reproduce (or a minimal PoC)
• Affected versions
• Any relevant logs or crash traces
• Your preferred contact information

We aim to acknowledge reports within 72 hours and provide a timeline for a fix.

We follow coordinated disclosure. Please do not open public issues or PRs for security vulnerabilities until we have investigated and coordinated a fix.