CatNet is currently in early development. Security updates are provided for the latest released version only.

Do not report security vulnerabilities in a public issue.

Use GitHub's private vulnerability reporting feature on the repository's Security page. Include the affected version, reproduction steps, impact, and any suggested mitigation. Remove credentials, configuration links, and unrelated personal network data from the report.

The maintainer will acknowledge a complete report when it is reviewed and will coordinate disclosure after a fix or mitigation is available. Please do not publicly disclose the issue before that coordination is complete.

Reports involving privilege elevation, native process ownership, resource integrity, secret storage, update delivery, or unintended traffic handling are especially valuable.