Security fixes are released for the latest version only. Please update to the latest release before reporting.
Please don't open a public issue. Report it privately instead:
Only the maintainer can see the report. Please include:
- The affected part: library, CLI, REST API server, MCP server, Docker image, or the install script / binaries
- The version you use
- Steps to reproduce or a proof of concept
- What an attacker could achieve
You'll get a reply in the report. Once the issue is fixed, a new version is released and the advisory is published, crediting you if you wish.
Issues with ČSFD itself (csfd.cz) are out of scope, please report those to ČSFD directly.