# Security Policy

If you discover a security vulnerability in Knowhere API, do not open a public
issue with exploit details.

Instead:

1. Use GitHub private vulnerability reporting for this repository if it is
   enabled.
2. If private reporting is not available, contact the repository maintainers
   privately and include:
   - a clear description of the issue
   - reproduction steps
   - affected endpoints, services, or files
   - any suggested mitigation

Please give the maintainers reasonable time to investigate and ship a fix
before public disclosure.
