Skip to content

Security: stihia-ai/stihia-librechat

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it responsibly. Do not open a public GitHub issue.

Instead, email support@stihia.ai with:

  • A description of the vulnerability
  • Steps to reproduce the issue
  • Any potential impact or severity assessment

We will acknowledge receipt within 3 business days and aim to provide an initial assessment within 10 business days.

Supported Versions

Security fixes are applied to the latest release on the main branch. Older versions are not actively maintained.

Disclosure Policy

We follow coordinated disclosure. Once a fix is available we will:

  1. Release a patched version.
  2. Publish a GitHub Security Advisory (if applicable).
  3. Credit the reporter (unless they prefer to remain anonymous).

Thank you for helping keep this project and its users safe.

There aren’t any published security advisories