Only official, unmodified releases are covered. Update to the latest compatible release before reporting whenever possible.

Do not disclose a suspected vulnerability in a public issue, pull request, or discussion. Use GitHub's private vulnerability reporting form instead.

Please include:

• the affected mod, Minecraft, Fabric Loader, Fabric API, and Java versions;
• whether the issue affects clients, dedicated servers, or both;
• prerequisites and a minimal reproduction;
• the expected and observed security impact;
• relevant logs or proof-of-concept material without third-party secrets; and
• whether the report has been shared elsewhere.

The maintainer will acknowledge the report when available, validate its impact, and coordinate a fix and disclosure when appropriate. Please allow reasonable time for investigation before publishing details. Reports made in good faith will not be penalized.

Ordinary crashes, mod conflicts, and gameplay bugs that do not create a security impact should use the public issue chooser.