Please don't report security vulnerabilities in public issues.

Report vulnerabilities privately through GitHub's private vulnerability reporting. If that isn't possible, send a direct message to @attrails.app on Bluesky and we'll arrange a private channel.

Please include steps to reproduce the issue and its impact. We'll acknowledge your report as soon as we can and keep you updated while we work on a fix.

Only the latest code on main and the hosted instance at attrails.app are supported. Data stored in users' own PDSes is outside our control; please report those issues to the PDS operator.