We take security vulnerabilities seriously. If you believe you have found a security issue, please report it to us by sending an email to tangge233@qq.com.

To help us triage and respond effectively, please include the following information in your report:

• Description – A clear summary of the vulnerability and the affected component.
• Proof of Concept (PoC) – Step-by-step reproduction instructions, or code/screenshots that demonstrate the issue. Reports without a PoC will be given lower priority.
• Impact Assessment – Your assessment of the potential severity (e.g., which data/system is affected, possible CVSS score if known, or the worst-case scenario under exploitation).

We will acknowledge your report within 48 hours and keep you updated on our progress. We kindly request that you do not disclose the vulnerability publicly until we have released a fix.