We take the security of Zenith seriously. If you discover a security vulnerability, please do not open a public issue.
Instead, report it privately through one of these channels:
- Use GitHub's private vulnerability reporting on the affected repository (Security tab → Report a vulnerability).
- Or contact the maintainers directly via our Discord.
Please include:
- A description of the vulnerability and its potential impact
- Steps to reproduce
- Any relevant version information (server artifacts, Zenith version, dependencies)
- We will acknowledge your report as soon as reasonably possible.
- We will investigate and work on a fix, keeping you informed of progress.
- Once resolved, we will credit you (if you wish) in the release notes.
Please give us reasonable time to address the issue before any public disclosure. Thank you for helping keep Zenith and its community safe.