Found a vulnerability in Kairo? Report it privately. Do not open a public issue.

reportprivate

Send a report to one of these private channels:

What to expect

  • We acknowledge your report within 7 days.
  • We work with you on a fix and agree on a disclosure timeline.
  • We do not offer a bounty.

Please do not

Do not open public GitHub issues, pull requests or posts for security bugs. Public reports expose users before a fix exists.