Please report security issues privately through GitHub's security advisory form rather than in a public issue.

Include the version, the input that triggers the problem, and what you expected to happen. You should get an answer within a few days.

ReorgLens parses untrusted input files. Anything that turns a malformed capture into a crash, an out-of-memory, or a report that misrepresents the chain is in scope.