Disclosure Policy
Please do not disclose any potential security issues publicly. Report the vulnerability to our team and give us time to work on it. We will disclose it responsibly as soon as it is properly remediated.
How To Disclose
If you think you have found a security vulnerability, please send an email to disclosure@wrensecurity.org. Only security-related issues should be sent to this address.
Please provide as much information as possible, including a description of the vulnerability, the software version, and the steps to reproduce the issue. Additional supporting materials, such as proof-of-concept code or screenshots, can also be helpful.
Our team will contact you to acknowledge receipt of the report. If necessary, we will work together on clarification and validation of the issue.
Publication
Security vulnerabilities are published as a security advisories within the GitHub project repositories.