Kin stores a private family record. If you find a vulnerability, please do not open a public issue.

Report it privately via GitHub's private vulnerability reporting for this repository. Include what you found, how to reproduce it, and its impact.

There's no bug bounty — this is a single-maintainer, self-hosted project — but reports are read and fixes are prioritized.