bruno/security.md

Security

At Bruno, we take security seriously and are committed to providing a safe experience for all users.
We appreciate responsible disclosure and value contributions that help improve Bruno's security.

Reporting a Vulnerability

To report a security issue, please email us at security@usebruno.com

When reporting a vulnerability, please include as many details as possible to help us investigate:

• Type of issue (e.g., cross-site scripting, malicious npm package, etc.).
• Full paths of source file(s) related to the issue.
• Location of affected code (tag, branch, commit, or direct URL).
• Any special configuration required to reproduce the issue.
• Step-by-step instructions to reproduce the issue.
• Proof-of-concept or exploit code (if available).
• Potential impact, including how an attacker might exploit the issue.

Please do not report security vulnerabilities through public GitHub issues.