Security

Report privately

Send suspected vulnerabilities tosupport@up.computer. Do not publish exploit details, credentials, or personal data in a GitHub issue.

Include the affected version, operating system, reproduction steps, expected impact, and any suggested mitigation. Do not access data that is not yours, disrupt services, or perform destructive testing.

Alpha support policy

Security fixes are normally shipped in the latest alpha release. Older releases are not guaranteed to receive backports. No fixed response or remediation deadline is promised yet, but good-faith reports are welcome and will be reviewed.