Please report security problems privately. Don't open a public issue, discussion or pull request for them.

Use GitHub's private vulnerability reporting: on this repository, open Security → Report a vulnerability.

Tell us as much as you can:

• What kind of problem it is (an approval or budget bypass, a way around read-only access, text that gets past the guardrail to a model, a leaked key or token, the console reachable from outside, and so on).
• The commit you tested.
• Steps to reproduce, and a proof of concept if you have one.
• What an attacker could do with it.

Test only against your own Peeblo, your own Otari org and your own Slack workspace.

We'll acknowledge your report within a few days, keep you posted while we fix it, and credit you in the release notes unless you'd rather we didn't.

Peeblo is young, so fixes land on the latest commit of the default branch only.