Report vulnerabilities privately through GitHub's Report a vulnerability. Don't post exploit details in a public issue.

Include the gpui-starter version, OS, what you found, steps to reproduce it, and the impact. A small proof of concept helps. Remove secrets and personal data from logs.

Only the latest release is supported.