Language: Deutsch | English

Only the latest released xucRun version is supported.

Do not report an unpatched or suspected vulnerability in a public issue, discussion, pull request or other public channel.

Use GitHub Private Vulnerability Reporting for the HT64/xucRun repository:

1. Open the repository's Security tab.
2. Select Report a vulnerability.
3. Provide a clear description, affected version or commit, reproduction steps, expected impact and any known mitigations.

Include only the sensitive data required to understand the problem. Do not submit real passwords, private keys, access tokens or unrelated personal data.

Further communication takes place through the private report. Response and remediation times depend on reproducibility, severity and implementation risk; this policy does not promise a fixed service level or a vulnerability bounty.

Please avoid public disclosure until a fix or coordinated advisory is available.

This policy applies to source and published packages from HT64/xucRun. Third-party software and modified builds are outside the support scope.