We take the security of retch seriously. If you believe you have found a security vulnerability, please do not open a public issue. Instead, please report it privately.
Please use GitHub's private security reporting by "Report a vulnerability" button above.
Note: Since this is a personal project, please allow for a few days for a response.
- You will receive an acknowledgment of your report within 48-72 hours.
- We will work with you to understand and validate the vulnerability.
- Once a fix is ready, we will coordinate a release and provide credit for your discovery if you wish.
Thank you for helping keep etr secure!