Security ​

YariloMail is designed with security in mind at every layer, with careful privilege separation between its components.

Reporting a vulnerability ​

Do not report security issues in the public issue tracker. Report them privately, so the issue can be fixed before it is disclosed.

To report a vulnerability, use one of these channels:

• the GitHub Report a vulnerability form (preferred)
• email to security@yarilomail.org

Include the affected version, the relevant part of the configuration, steps to reproduce, and the impact you observed.

We acknowledge a report within 7 days.

For bugs that are not security issues, see Support.

Advisories ​

Published security advisories are listed here, newest first.