Security fixes are applied to the current release line. Upgrade to the newest published version before reporting a problem that only appears on an older build.

Use GitHub private vulnerability reporting for vulnerabilities in Kaidera OS community source. Include:

• affected version or commit
• operating system and installation method
• reproduction steps and impact
• the smallest proof of concept needed to verify the issue
• any proposed mitigation

Do not include live credentials, customer data, or unrelated private logs. Rotate any credential that may have been exposed before submitting the report.

Do not open a public issue or pull request for an unpatched vulnerability. The maintainers will coordinate validation, a fix, release timing, and disclosure in the private advisory.

Enterprise-service incidents and account-specific support requests should use the support channel in the applicable Kaidera AI agreement rather than this public repository.