If you discover a security vulnerability, please do not open a public issue. Instead, report it privately via GitHub's private vulnerability reporting on the affected repository (replace REPO with the actual repository name: commit-check, commit-check-action, commit-check-mcp).

We'll respond as quickly as possible and keep you updated throughout the process.

Only the latest release of each project receives security patches.