To report a vulnerability in BugTraceAI itself, contact the maintainers privately at info@bugtraceai.com.

Include the affected repository and version, a description of the impact, and reproduction steps using a non-sensitive test target. Redact credentials and private target data from any supporting logs.

If a repository provides its own security policy, follow that policy.

This channel is for product vulnerabilities in BugTraceAI. Findings against a third-party application should be reported through that application's authorized disclosure or bug bounty process.