Please do not report security vulnerabilities in public issues, discussions or pull requests.
Email support@uigraph.app with:
- A description of the issue and its impact
- Steps to reproduce, or a proof of concept
- The affected version (
uigraph --version) and your environment
We aim to acknowledge reports within 3 business days and will keep you updated as we investigate and fix the issue. Once a fix is released we are happy to credit you, if you wish.
Security fixes are applied to the latest released version. Please upgrade before reporting.
UIGraph runs locally: the viewer listens on 127.0.0.1 only. Reports about the CLI, the local viewer, and how artifacts are read and written in a user's project are in scope.