If you believe you have found a security or privacy issue in this project, please report it privately.

• email: devs@put.io

Use private email for vulnerabilities or sensitive reports.

Useful reports usually include issues involving:

• authentication, authorization, or session handling
• token, secret, or credential exposure
• privilege escalation or access-control bypass
• private or user data exposure
• unsafe request handling or injection issues

• test only against accounts, environments, and data you control
• keep testing non-destructive, low-volume, and limited to systems you control
• keep reports focused on technical vulnerabilities in this repository

Report issues against the latest published release, or against main when the issue is only reproducible there.

Please allow a reasonable amount of time to investigate and fix the issue before sharing details publicly.

If the report is valid, we will work on a fix and coordinate disclosure as appropriate.