Do not open a public GitHub issue, discussion, or pull request for a security-sensitive report.
Use GitHub private vulnerability reporting for this repository.
Include:
- Affected version, tag, or commit
- What happens and why it is security-sensitive
- Steps to reproduce (or a proof of concept)
There is no bug bounty.
This repository is a starter template for Telegram bots built with botspot. Reports about the botspot library itself belong in that repository's private advisory form. Reports about the Telegram Bot API belong with Telegram, not here.
Strip bot tokens, API keys, and user chat contents from reproductions.