Security Policy

Supported version

Security fixes are applied to the latest release and the main branch.

Reporting a vulnerability

Please do not open a public issue for a vulnerability. Use GitHub's private vulnerability reporting feature on this repository. Include reproduction steps, affected configuration, impact, and a suggested mitigation when possible.

Never include a real Telegram token, cookies file, private URL, or personal chat data. Rotate any secret that may have been exposed during testing.