ARO is in active development. Security fixes are applied to the latest version only.

If you discover a security vulnerability, please open a public issue! We appreciate your help in making ARO better.

When reporting, please include:

• Steps to reproduce the issue
• The potential impact
• Any suggestions for a fix (optional but welcome!)

• Code injection vulnerabilities
• Path traversal issues
• Unsafe deserialization
• Any issue that could compromise systems running ARO applications

Note that ARO is an experimental language for learning and prototyping. It is not intended for production use and should not be used in security-critical environments.