Skip to main content
Please don’t report security problems in public issues. Report them privately through GitHub: open the repository’s Security tab and choose Report a vulnerability.

Report a vulnerability

Open a private security advisory on Xittered/xitter.

​
What to report privately

Anything that lets someone:
  • act as another account, or as staff;
  • read posts, messages or data they shouldn’t see;
  • get around a suspension, a block or the admin panel’s checks;
  • take down or slow down an instance with little effort.

​
What to include

  • What the problem is.
  • How to reproduce it.
  • Which commit you tested.
Fixes land on main. There are no separate release branches.