This repo has no versioned releases: the deployed main branch of
qntx/sh is the only supported line.
Report security issues privately via GitHub Security Advisories on
qntx/sh, or email
security@qntx.org if that channel is unavailable.
Please include:
- The affected app or package (
apps/sh,packages/sync,crates/) - Minimal reproduction (catalog key, URL, or installer flag)
- Impact assessment (e.g. hash-verification bypass, script injection)
Do not open public issues for unfixed vulnerabilities.