Security fixes are provided for the latest released version of silo. If you are running an older build, update to the latest release before reporting an issue unless the vulnerability is also present there.
Please do not open public GitHub issues for security vulnerabilities.
Use GitHub private vulnerability reporting from the repository's Security tab. If that is unavailable, email the maintainer at github@coltons.space. Include:
- affected version or commit
- operating system
- steps to reproduce
- expected impact
- any logs or screenshots that do not expose secrets
Please do not include recovery phrases, private keys, API tokens, or live wallet secrets in the report.
You should receive an initial acknowledgement within 3 business days. Confirmed vulnerabilities will be triaged privately, fixed, and disclosed after a patched release is available when appropriate.