Security
Reporting a vulnerability
Tell the maintainer about a security problem privately, before it becomes public.
Report security problems privately, never in a public issue or discussion. There are two ways:
- On GitHub: use the private report form (Security tab › Report a vulnerability).
- By email: write to security@linscp.org.
The security page explains both step by step, what to put in your report, what counts as a vulnerability and what happens after you send it.