Skip to content


Security Policy

Supported Versions

Latest major version in terms of semantic versioning is supported.

Version Supported
< 1.0

Reporting a Vulnerability

Please don't disclose security-related issues publicly.
If you discover a security vulnerability within YOURLS, please report it using one the methods below.
All security vulnerabilities will be promptly addressed, but please bear in mind we're a project run entirely by volunteers in our spare time.

Via GitHub Security Advisory (preferred)

Report security issues by filling in the security advisory form.

Via Email

Send an email to YOURLS Team at

Public PGP Key

Public PGP key hosted in Web Key Directory.

gpg --locate-key
Learn more about advisories related to YOURLS/YOURLS in the GitHub Advisory Database