Please do not open a public issue for security vulnerabilities.

Instead, use GitHub's private vulnerability reporting: Report a vulnerability (the Security tab → Report a vulnerability). We'll acknowledge your report and work with you on a fix and coordinated disclosure.

Fennec is pre-1.0 and moves quickly. Security fixes land on main and ship in the next release; please report against the latest main or release.

Fennec is an offensive security tool. Only point it at systems you own or have explicit written authorization to test. Running it against third-party systems without permission may be illegal. You are responsible for how you use it — see the "Authorized testing only" notice in the README.