Email security@openie.dev with a description of the issue, steps to reproduce, and any proof-of-concept artifacts. Do not open a public issue for security-sensitive reports.
We will acknowledge within 72 hours and follow up with a triage timeline.
- Issues in the released binaries (this repository's releases).
- Issues in the documentation that could lead a user into an unsafe configuration.
Out of scope: hypothetical issues in the private source (see openIE-dev/pattern-lang-core) — report those via the same email.
We coordinate disclosure once a fix is available. Reporters are credited in release notes unless they request otherwise.