Report vulnerabilities privately through GitHub's Report a vulnerability. Don't post exploit details in a public issue.

Include the Herdr version, OS, what you found, steps to reproduce it, and the impact. A small proof of concept helps. Remove secrets and personal data from logs.

Only the latest release is supported.

For how Herdr handles trusted mods, updates and telemetry, see security and privacy.