Please report suspected security vulnerabilities privately by emailing contact@safeaiaus.org. Do not open a public issue containing vulnerability details, credentials, personal information, or reproduction steps that could put users at risk.

Include, where possible:

• the affected page, file, workflow, or dependency;
• a description of the potential impact;
• steps to reproduce or supporting evidence; and
• any suggested remediation.

We will review reports and respond as capacity permits. SafeAI-Aus is an open-source community project, so no specific response or remediation timeframe is guaranteed.

For AI safety concerns that are not vulnerabilities in this repository or website, please see the resources at safeaiaus.org.

The website also publishes a machine-readable security contact at https://safeaiaus.org/.well-known/security.txt.