Send suspected vulnerabilities privately to ehsan.estaji@umu.se. Do not open a public issue for a suspected security vulnerability.

Include the affected FastaGuard version, installation method, operating system, steps to reproduce, potential impact, and any known mitigation. Do not include private sequence data; use a minimal synthetic example or a safe description.

The maintainers will review reports, confirm scope, and coordinate a response. Please allow time for investigation before publicly disclosing a vulnerability.

FastaGuard is a local FASTA preflight tool. Security reports are most useful when they describe unsafe handling of input files, generated reports, command line options, dependencies, packaging, or release artifacts.