This platform handles vulnerability reports. The irony of having a security policy here is not lost on us.
Report via GitHub Security Advisories. Response within 24h.
- Authentication bypass on report submission
- Unauthorized program access or data exfiltration
- AI triage manipulation (inflating severity)
- Hunter identity exposure
- SQL injection in report content