email security@unauth.dev with what you found, how to reproduce it, and the version you tested. plain text is fine, no pgp required yet.
we aim to acknowledge within 72 hours and will keep you posted as we triage. please give us a reasonable window to fix before disclosing publicly.
only the latest 1.x release gets fixes. upgrade before reporting against an older version.
| version | supported |
|---|---|
| 1.x (latest) | yes |
| anything older | no |
we will never ask for your credentials — aicheck needs none and sends nothing anywhere.