Security / Disclosure

Report a security concern.

If you believe you found a vulnerability in Abora OS or its project infrastructure, share enough detail for the maintainers to reproduce it—without exposing users while it is being assessed.

Share it privately

Use GitHub’s private vulnerability reporting for the Abora OS repository if the repository offers it. Do not publish exploit details or sensitive user data in a public issue. If private reporting is unavailable, contact the project maintainers through the repository and ask for a private disclosure channel before sending technical details.

Open GitHub security reporting

Include these details

Abora release, installed kernel/package versions, and system configuration needed to reproduce.
Clear reproduction steps and expected versus actual behavior.
Potential impact and any proof-of-concept kept private and limited to what is necessary.
Whether the issue is already known to affect an upstream package or CVE.

General community support

Use Matrix for general questions and community discussion. Do not post sensitive details or unpatched vulnerability reports there.

Join Abora OS on Matrix