Please do not open a public issue for a suspected vulnerability.

Email Gregory M. Kurtzer at gmkurtzer@gmail.com or gmk@ciq.com with the subject [WALDO security]. Include the affected commit, impact, and the smallest safe reproduction you can provide. Remove credentials, private paths, and sensitive corpus content from the report.

WALDO is under active development and does not yet publish supported release branches. Reports against the current main branch are welcome.