Cortex is a personal fork of Warp. Most code is inherited from upstream and is best reported there.

• Cortex-specific code (anything not in upstream Warp): open a private advisory on this repo. Please don't file a public issue.
• Upstream Warp code: report via security@warp.dev or Warp's private advisory page. Fixes flow back into Cortex via regular upstream merges.