If you discover a security vulnerability, do not open a public issue.
Email: gqa0g6ur@anonaddy.me
Include a description, steps to reproduce, and potential impact. I'll respond as soon as possible.
Only the latest version of sinbo receives security fixes.
The install script at install.sh and install.ps1 should always be reviewed before piping to a shell. You can inspect them directly:
curl -sSf https://raw.githubusercontent.com/sinbo-cli/sinbo/main/install.sh | less- Vulnerabilities in sinbo's encryption implementation
- Supply chain or install script tampering
- Sensitive data exposure via metadata or plaintext leaks