AgentBridge is a self-hosted application: security issues can affect the data that stays on your machine, so they are taken seriously.
Do not open a public issue for security problems. Report them privately:
- Go to https://github.com/Graphene-Lab/AgentBridge/security/advisories/new
- Describe the vulnerability, the affected version and the steps to reproduce.
Reports are acknowledged within a few days and fixed in the next release.
Security fixes ship in the latest release. Updates are automatic by default (see docs/autoupdate.md), so staying on the latest version is the recommended way to remain covered.