Do not open a public issue for a security problem.

Send an email to [email protected]. Write "Security" in the subject line. Say which version of the client you use, and what you found. We will answer as soon as we can.

• We confirm that we got your report.
• We tell you what we plan to do.
• We credit you in the release notes if you want that.

This policy covers the code in this repository. For a problem in the Klaracase service itself, use the same address.

If you think an API token leaked, revoke it at https://klaracase.de/settings/api-tokens and create a new one. The client never writes the token to an exception message or to a log.