Please report security problems privately. Do not open a public issue, pull request, or Discord post for a vulnerability.
Email vibheksoni@engineer.com with:
- the repository and version or commit affected,
- the steps to reproduce, or a proof of concept,
- the impact as you understand it.
You will get an acknowledgement as soon as the report is read. Please give us a reasonable time to fix the problem before you disclose it publicly. We will credit you in the fix notes if you want us to.
This policy covers the code in the Free-The-Ai repositories and the FreeTheAI API and websites. Reports about other services are welcome, but they may need to go to the owner of that service.
If you find an API key, token, or password in a repository, report it right away with the same email. Do not use it, and do not share it. We will rotate it.
Security fixes go to the latest release of each repository and to the live service.