Skip to content

Security: Free-The-Ai/.github

Security

SECURITY.md

Security policy

Reporting a vulnerability

Please report security problems privately. Do not open a public issue, pull request, or Discord post for a vulnerability.

Email vibheksoni@engineer.com with:

  • the repository and version or commit affected,
  • the steps to reproduce, or a proof of concept,
  • the impact as you understand it.

You will get an acknowledgement as soon as the report is read. Please give us a reasonable time to fix the problem before you disclose it publicly. We will credit you in the fix notes if you want us to.

Scope

This policy covers the code in the Free-The-Ai repositories and the FreeTheAI API and websites. Reports about other services are welcome, but they may need to go to the owner of that service.

Keys and secrets

If you find an API key, token, or password in a repository, report it right away with the same email. Do not use it, and do not share it. We will rotate it.

Supported versions

Security fixes go to the latest release of each repository and to the live service.

There aren't any published security advisories