Please do not open a public issue for an exploitable vulnerability.

Use GitHub private vulnerability reporting if it is available on this repository. If it is not available yet, contact the maintainers privately through the official Cobayka support channel and include:

• affected version;
• server platform and Minecraft version;
• short impact summary;
• reproduction steps or a minimal fixture;
• whether the issue is already public.

We try to acknowledge reports quickly and will coordinate a fix before public disclosure where that is reasonable.

Bulwark Free is a scanner. It does not promise complete protection and does not replace host hardening, plugin updates, backups, firewalling or staff permission hygiene.