Please use the repository's private security-advisory reporting channel. Do not open a public issue for an undisclosed vulnerability.

Include the affected version or commit, impact, reproduction conditions, and any suggested mitigation. Do not include live credentials, private identifiers, or personal data.

Identifold 1.x is the supported stable release line. Security fixes are applied to the latest 1.x release and the current main branch.

MID, PID, and REF values are identifiers. They are not credentials and must not be used as proof of authorization.