Do not disclose suspected vulnerabilities in public issues, Discussions, pull requests, or chat.
- For Hyphae, use GitHub private vulnerability reporting at https://github.com/Hyphae-Research-Foundation/hyphae/security.
- For Hyphae Transformer, follow its current security guidance at https://github.com/Hyphae-Research-Foundation/hyphae-transformer/security.
- For Hyphae BitNet, follow its security policy at https://github.com/Hyphae-Research-Foundation/hyphae-bitnet/blob/main/SECURITY.md.
- For the organization profile, use private vulnerability reporting on this repository when enabled.
Include the affected revision, platform, reproduction steps, impact, and any proposed mitigation. Do not include unrelated secrets or personal data.
We aim to acknowledge a complete report within seven calendar days. This is a best-effort bootstrap target, not a service-level agreement.