SECURITY REPORTING

Found a weakness?
Tell us privately.

Help us investigate suspected vulnerabilities without exposing people or their data.

Start a private report.

Use GitHub’s private vulnerability reporting in the public mutte-me/mutte-client repository. You’ll need to sign in to GitHub; the report and follow-up stay in its private reporting channel.

Include the affected version, potential impact and reproduction steps. Use synthetic examples. Never send credentials, private keys, access tokens, real messages or another person’s personal data.

Report privately on GitHub

Or email us privately at contact@mutte.me

Give us room to investigate.

Do not open a public issue for a suspected vulnerability. Please allow time for validation and coordinated remediation before publishing details. Mutte currently has no bug-bounty program.

Mutte is alpha software. Only the current main revision and newest prerelease receive security fixes; older versions are unsupported.

Read the project security policy

Finding the right channel.

If GitHub’s Report a vulnerability control is unavailable, contact a maintainer through their GitHub profile without sensitive details and request a private channel. For ordinary bugs, use our help page.

View security.txt

Found a weakness?Tell us privately.

Start a private report.

Give us room to investigate.

Finding the right channel.

Found a weakness?
Tell us privately.