Security policy

Table of contents

• Reporting a vulnerability

Reporting a vulnerability

If you find a security vulnerability, please do not open a public issue or discussion. Public reports can put other users at risk before a fix is available.

Instead, send an email to the address shown below with:

• A description of the problem and its impact.
• Steps to reproduce it, or a proof of concept.
• The affected version or ISO.

We will acknowledge your report and keep you updated while we work on a fix. Please give us reasonable time to fix the issue before disclosing it publicly.

Non-security bugs belong on the Report a bug page.