Report a Chat vulnerability
Use GitHub's private vulnerability reporting to send a security finding to the Chat repository maintainers.
Start a private security report
A GitHub account is required. Reports are handled through the repository's private advisory workflow; do not post exploit details in public issues while a report is being assessed.
Useful report details
- Affected version or commit and the feature involved.
- Expected and observed behavior, with a minimal reproduction using test accounts.
- Potential impact and whether a workaround is available.
Do not include real users' private messages, live credentials, seed phrases, private keys, or wallet signatures. Use synthetic data. Do not test against other people's accounts or change production room membership to demonstrate an issue.
The public web preview and current main branch are the maintained development surfaces. There is not yet a published stable native release or a guaranteed remediation response time.