Security Disclosure

[AruvasgaChithan]

Hello,

I believe I have identified a potential security vulnerability affecting ServerKit.

I noticed the SECURITY.md recommends GitHub Security Advisories, but private reporting appears unavailable.

Could you provide the preferred private channel for responsible disclosure?

Thank you.

[jhd3197]

Thanks for the responsible disclosure, and for flagging that the private channel wasn't reachable — you were right, private vulnerability reporting was disabled. I've now enabled it. Please use the "Report a vulnerability" button on the Security tab (https://github.com/jhd3197/ServerKit/security/advisories/new) to file privately. Appreciate you holding the details until there's a fix. 🙏