Please do not publish exploitable security details in a public issue. Use GitHub's private vulnerability reporting feature for this repository when available. Include the affected component, reproduction steps, impact, and any suggested mitigation.

Useful reports include injection or path-handling issues, unsafe source parsing, exposure of locally saved watchlist data, dependency vulnerabilities with a practical impact, and ways an untrusted record could execute code in the client.

Recall data quality disputes and false matches are important, but should be reported as regular issues unless they create a security impact.

RecallBridge is a search and organization tool. It does not certify product safety, replace official agency instructions, or guarantee notification of every recall.