This repository holds documentation and artwork only; the source code of cvitea is private.

If you find a vulnerability in cvitea, please report it privately through GitHub's private vulnerability reporting: open the Security tab of this repository and choose Report a vulnerability. Please do not open a public issue.

Please test only as far as you need to describe the finding: no load tests, no automated scanning of the live platform and no access to other people's data.

How the platform protects invitations, agents and releases is described in the README and in How cvitea is built.

Deutsch: Sicherheitslücken bitte vertraulich über Security → Report a vulnerability in diesem Repository melden, nicht als öffentliches Issue. Bitte nur so weit testen, wie es für die Beschreibung nötig ist: keine Lasttests, kein automatisches Scannen der Live-Plattform, kein Zugriff auf Daten anderer.