These are release lines — the v* tags and CHANGELOG.md entries — not individual package versions. One release publishes several packages at different numbers, so 0.4.0 ships @zensation/algorithms@0.4.0 alongside @zensation/core@0.3.0 and both adapters at 0.2.0.

Please do NOT create public GitHub issues for security vulnerabilities.

Report security vulnerabilities to security@zensation.ai.

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

ZenBrain follows these security principles:

• Parameterized queries — all SQL uses $1, $2 placeholders, never string concatenation
• No eval() — no dynamic code execution
• No network calls — algorithms package has zero runtime dependencies
• Input validation — all public APIs validate inputs
• Dependency minimization — core algorithms have zero dependencies

We ask that you:

1. Give us reasonable time to fix the issue before public disclosure
2. Make a good faith effort to avoid privacy violations and data destruction
3. Not exploit the vulnerability beyond what's necessary to demonstrate it

We will:

1. Acknowledge your report promptly
2. Keep you informed of our progress
3. Credit you in the security advisory (unless you prefer otherwise)