Security fixes are applied to the latest release on main.

Please do not report security vulnerabilities in public GitHub issues.

Use one of the following channels instead:

1. Open a private vulnerability report through GitHub Security Advisories for this repository, if that option is available to you.
2. Email jin.ku@sendbird.com with:
   • a description of the issue
   • affected files or flows
   • reproduction steps or proof of concept
   • any suggested mitigation

Sendbird will review the report and respond as quickly as possible. When a report is confirmed, fixes will be developed on the latest supported version and coordinated for disclosure.