Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in guIDE, please report it responsibly.

Email: admin@fileshot.io

Please include:

A description of the vulnerability
Steps to reproduce the issue
Any relevant screenshots or logs

We will acknowledge receipt within 48 hours and work to address the issue promptly.

Scope

Security reports are welcome for:

Remote code execution vulnerabilities
Privilege escalation issues
Data exposure through the Electron IPC bridge
Vulnerabilities in the preload script or context bridge
Issues with the embedded browser sandbox

Out of Scope

Issues requiring physical access to the machine
Social engineering attacks
Denial of service attacks against the local application

There aren’t any published security advisories