Report a vulnerability

Please report suspected vulnerabilities in Rynhult privately, not in a public issue.

What to include

  • The affected version or commit.
  • The impact, and what an attacker needs first.
  • A minimal reproduction using artificial accounts and documentation addresses, such as example.com and 192.0.2.10.

Leave out credentials, tokens, personal data, private network details and session transcripts.

What happens next

The maintainer coordinates a fix and its disclosure with you. No response time or supported-version guarantee has been set yet.