Please report vulnerabilities privately, not in a public issue, pull request or Discord channel.
- Preferred: GitHub private vulnerability reporting. Open this repository's Security tab and choose Report a vulnerability.
- Or tell us in the SkillPouch Discord server that you've found a security issue. Leave out the details there; we'll take it from you privately.
Issues on the server side can be reported here too.
What to include, supported versions, scope, our good-faith promise and the security model are in the documentation: docs.skillpouch.net/security.