Report vulnerabilities privately to support@quarryserp.com. Include reproduction steps and the affected version. Please avoid public disclosure until we have coordinated a fix.