Security fixes are provided for the latest released 2.6.x version of create-fsd-architecture. Older versions should be upgraded before a fix is requested or applied.

Do not report suspected vulnerabilities in a public GitHub issue.

Use GitHub's private vulnerability reporting form for this repository:

https://github.com/FSD-CLI/cli/security/advisories/new

If private reporting is unavailable, contact the repository maintainers through GitHub and request a private communication channel before sharing technical details.

Include the affected CLI version, Node.js version, operating system, a minimal reproduction, impact, and any suggested mitigation. Avoid publishing an exploit, credentials, project secrets, or user data.

Maintainers will confirm receipt, assess the report, and coordinate a fix before public disclosure. Please allow time for users to update after a fixed release is available.

This policy covers the CLI source, published package, and release workflows in this repository. Vulnerabilities isolated to a separate template repository should be reported to that repository as well.