Coordinated disclosures and security writeups by Ahmet Kazankaya (@kasparovabi). Each writeup in this repository is published after: Where the vendor refuses to act, the disclosure window is shortened in proportion to the vendor’s behavior, the public exposure of the affected code paths, and the regulatory clocks that may apply to affected users (HIPAA, GDPR, SOC 2 audit obligations). No proof-of-concept exploit code is published in this repository. Technical detail is sufficient to reproduce findings against the source code; no payload, weaponized scanner, or live-target tooling is included.