Please do not open a public issue for security vulnerabilities.
- Preferred: use GitHub's private vulnerability reporting ("Report a vulnerability" under the repository's Security tab).
- Email:
info@iaser.ai— clearly mark the subject with[SECURITY].
We will acknowledge reports as quickly as we can, keep you informed of progress, and credit reporters who wish to be credited once a fix ships.
The production backend in apps/api/ (API, authentication, data handling) and
anything deployed at api.askansari.ai (also reachable as api-35.ansari.chat).
Please practice responsible
disclosure: no testing against production user data, no denial-of-service.