Do not publicly disclose vulnerabilities, proof-of-concept exploits or personal data in public issues. Use GitHub's private vulnerability reporting for this repository when enabled. If it is unavailable, contact the project maintainers privately through the LibreCode Coop's established channels to obtain a confidential reporting route. No response-time SLA is claimed.

Only development snapshots of Nextcloud 36 are currently in the verified scope. Never reuse credentials or test data from an actual deployment in test reports. Do not enable unrestricted outbound messaging to a real provider in CI.