generated: '2026-07-17'
method: searched
probe: true
source: https://github.com/ArenaX-Labs/rlmesh/blob/main/SECURITY.md
description: >-
  ArenaX Labs publishes a private vulnerability-disclosure policy in the RLMesh
  repository SECURITY.md. Reporters email the security contact privately and do
  not open public issues for vulnerabilities, credential exposure, sandbox-escape
  concerns, or dependency-chain compromises.
policy:
  - https://github.com/ArenaX-Labs/rlmesh/blob/main/SECURITY.md
contact:
  - research@competesai.com
requires:
  - reproduction steps
  - affected versions
  - relevant logs or artifacts
evidence:
  - source: https://github.com/ArenaX-Labs/rlmesh/blob/main/SECURITY.md
    kind: security-policy
    detail: "Private email disclosure to research@competesai.com; no public issues for security reports."