We fix security issues in the latest release only. If you run an older version, update to the latest release before you report an issue.

Do not open a public issue, discussion, or pull request for a security issue.

Report it in private with one of these methods:

• Open a draft advisory at github.com/autobrr/qui/security/advisories/new.
• Send an email to security@getqui.com.

Include the qui version, the steps to reproduce the issue, and the effect on a user. A proof of concept helps us fix the issue faster.

We reply to your report and tell you if we accept it. When we release a fix, we publish a GitHub security advisory. If you want credit in the advisory, tell us the name to use.