> ## Documentation Index
> Fetch the complete documentation index at: https://help.xitter.space/llms.txt
> Use this file to discover all available pages before exploring further.

# Reporting security issues

> How to report a vulnerability in Xitter privately.

Please don't report security problems in public issues. Report them privately through GitHub: open the repository's **Security** tab and choose **Report a vulnerability**.

> **[Report a vulnerability](https://github.com/Xittered/xitter/security/advisories/new)**
>
> Open a private security advisory on Xittered/xitter.

## What to report privately

Anything that lets someone:

* act as another account, or as staff;
* read posts, messages or data they shouldn't see;
* get around a suspension, a block or the admin panel's checks;
* take down or slow down an instance with little effort.

## What to include

* What the problem is.
* How to reproduce it.
* Which commit you tested.

Fixes land on `main`. There are no separate release branches.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.