Please report a security problem privately — never in a public issue:
- by email: hello@wirecat.dev;
- or through GitHub's private vulnerability reporting.
Say what you saw, how to repeat it, and the version (pbx --version). Never send a token, a password, a session or
anyone's private content.
What pbx keeps on your computer: the shared security page and
docs/security.md.
Security audits of pbx follow the shared
security method in cli-testing.