Skip to content

Repository navigation

Security: Bustabo/unbound

Security

.github/SECURITY.md

Security policy

Reporting a vulnerability

Please don't report security problems in public issues, pull requests or the Discord server.

Report them privately through GitHub instead: open the repository's Security tab and choose Report a vulnerability, or go straight to the private report form. Only the maintainers can see the report.

Include what you found, how to reproduce it, and which parts it affects: the client, a first-party plugin, the iOS or Android loader, the website or the build and release workflows. We'll reply as soon as we can and keep you updated until it's fixed.

What's in scope

  • The Unbound client and the first-party plugins in this repository.
  • The iOS and Android loaders, including bundle and addon signature checks.
  • The website and its API.
  • The GitHub workflows that build, sign and publish releases.

Plugins and themes made by other people are out of scope. Report those to their authors.

There aren't any published security advisories