Report a vulnerability privately through GitHub's private vulnerability reporting: on this repository, open Security › Report a vulnerability. Do not open a public issue for it.

Include what is affected, how to reproduce it and what an attacker gains. Design findings that do not put anyone at risk until v1.0 can go in a public issue instead.

BlindVault is not yet at v1.0. Only the latest release is supported.