If you discover a security vulnerability in this project, please report it responsibly using GitHub's private vulnerability reporting rather than opening a public issue.

This allows the details to remain private until a fix is in place.

To help investigate the issue, please provide as much of the following as possible:

• A description of the vulnerability and its potential impact.
• Steps to reproduce the issue.
• Any relevant code, configuration, or environment details.

This is a solo project maintained in spare time. I will endeavour to:

• Acknowledge your report as soon as reasonably possible.
• Keep you informed of progress towards a fix.
• Credit you in any disclosure (unless you prefer to remain anonymous).

There are no guaranteed SLAs, but all legitimate reports will be taken seriously and handled with care.

This project is a single-use Blazor utility for importing tasks into Microsoft Planner. Security concerns most relevant to this project include:

• Handling of Microsoft Graph tokens or credentials.
• CSV parsing vulnerabilities (e.g. injection, path traversal).
• Any unintended data exposure or transmission.

• Vulnerabilities in third-party dependencies (please report those upstream).
• Issues only reproducible in unsupported or unofficial builds.