Thank you for helping to keep mush and its users secure! We take security seriously and appreciate your efforts to responsibly disclose vulnerabilities.

We release security updates for the latest stable version of mush. Please ensure you are using the most recent release before reporting a vulnerability.

Older versions may not receive security updates.

If you discover a security vulnerability, please report it to us privately to minimize risk to users. Do not create a public GitHub issue for security matters.

To report a vulnerability:

• Email us at sporolyum@gmail.com with details and steps to reproduce.
• Or, use GitHub's private vulnerability reporting if available.

We will acknowledge your report within 3 business days and work with you to resolve the issue as quickly as possible.

We ask that you:

• Give us a reasonable time to investigate and address the issue before any public disclosure.
• Avoid exploiting the vulnerability or accessing user data beyond what is necessary for your report.

For any security-related questions or concerns, please contact us at sporolyum@gmail.com.

Thank you for helping us keep mush safe!