noa-sdk is research/alpha software and has not had an independent security audit.
Please do not open a public issue for security problems. Report them privately to:
Include the affected version or commit, a description of the issue and, if possible, steps to reproduce it. We will acknowledge the report, work on a fix and agree on a disclosure date with you.
If the issue affects OpenZiti itself rather than this implementation, please report it to the OpenZiti project through its own security process as well.
Only the latest commit on the default branch receives fixes while the project is in alpha.