Security

Report suspected vulnerabilities privately through GitHub security advisories. Do not place exploit details, credentials, personal information or sensitive evidence in a public issue.

Open a private security report ↗

Testing must avoid disruption, denial of service, social engineering, persistence, data access beyond your own records, or damage. This channel is not a bug-bounty promise.