Please report security vulnerabilities privately. Use GitHub's "Report a vulnerability" button under this repository's Security tab (GitHub private vulnerability reporting) rather than opening a public issue.

Include a clear description, reproduction steps, and the affected version. We aim to acknowledge reports within a few business days and will keep you informed through remediation and coordinated disclosure.

Security fixes are made against the latest published release. Please upgrade to the newest version before reporting, and mention the version you tested.

This repository is part of StandIn (standin.komaa.com). If you believe you have found an issue in the hosted StandIn service itself, please report it here as well and we will route it appropriately.