Pre-alpha
Security policy
How to report a suspected vulnerability privately.
Oaken Mail is beta software (0.1.x). Please report suspected vulnerabilities privately and do not open a public issue.
Report it privately through GitHub: open a security advisory on this repository (the "Report a vulnerability" button on its Security tab). Only the maintainers can see it. If that is not available to you, contact @dfoulks1 on GitHub and say only that you have a security report; do not put the details in a public issue.
Include what you found, how to reproduce it, and the version or commit. You can expect an acknowledgement, and we will coordinate disclosure with you.