Security fixes are considered for the latest published version of OrbitTest.

Please do not publish exploit details in a public issue.

If the GitHub repository has private vulnerability reporting enabled, use that first. If no private channel is available, open a minimal public issue asking for a private security contact and do not include sensitive details.

Please include:

• OrbitTest version
• Node.js version
• Operating system
• Affected API or CLI command
• Steps to reproduce
• Impact
• Any known workaround

The maintainer will review the report and publish a fix or mitigation when appropriate.