Runa is currently preparing the first v0.1.0 public release. Security fixes target the latest development branch until a stable release line exists.
Please do not open a public issue for a suspected vulnerability.
Send a report to security@duxweb.dev with:
- affected package or module
- reproduction steps or proof of concept
- expected impact
- suggested fix, if known
We will acknowledge receipt, investigate, and coordinate a fix before public disclosure.