The SDK is currently in alpha. Security fixes are applied to the latest available alpha release and the main branch. Older alpha versions may not receive backports.

Do not report suspected vulnerabilities in public issues, discussions, or pull requests.

Use GitHub's private vulnerability reporting for this repository:

https://github.com/AutomationML/automationml-python/security/advisories/new

Include the affected version, impact, reproduction steps, and any suggested mitigation. Please avoid including confidential AutomationML documents unless they are strictly necessary and approved for disclosure.

The maintainers will acknowledge reports as soon as practical, investigate the impact, and coordinate remediation and disclosure with the reporter. Because the project is currently maintained on a best-effort basis, no fixed response or resolution time is guaranteed.