Please report security vulnerabilities privately. Do not open a public issue.

• Email security@briar.systems, or
• Use GitHub's private vulnerability reporting on the affected repository, under the Security tab, "Report a vulnerability".

We will acknowledge your report, keep you updated through remediation, and credit you once a fix ships, unless you would rather remain anonymous.