A3SQL is a Rust DLL loaded into the Arma 3 game process. A security vulnerability could affect users' systems. If you find one:

1. Do not open a public GitHub issue.
2. Open a private advisory. This is the primary and preferred reporting channel: it routes the report to the maintainer privately and keeps the details confidential until a fix is released.
3. If the advisory form is unavailable, email the maintainer directly at matthewbarker@librem.one.

We will acknowledge receipt within 48 hours and aim for a fix within 7 days.

The following areas are in-scope:

• SQL injection via the $1/$2 parameter substitution mechanism
• TCP listener authentication bypass
• Buffer overflow / memory safety in the Rust layer
• Unsafe file operations (save/load paths escaping the mod directory)

The following are NOT in-scope:

• Arma 3 engine vulnerabilities (report to Bohemia Interactive instead)
• Mods using A3SQL that pass unsanitized user input (that's the mod's responsibility)