Security updates are provided for the latest release.

Please do not report security vulnerabilities through public issues.

Report security issues privately to the maintainers.

Include:

• Description of the vulnerability

• Steps to reproduce

• Potential impact

• Suggested fixes if available

Please allow maintainers reasonable time to investigate before public disclosure.

All of the maintainers’ emails will eventually be provided.

Security reports may include:

• Authentication issues

• Encryption vulnerabilities

• Remote code execution

• Data exposure

• Network protocol vulnerabilities

• Server security problems

FOSSil Chat is currently in early development.

Security features such as end-to-end encryption and advanced identity verification are planned but not yet implemented.