Security Policy

Reporting a vulnerability

If you find a security issue in a Fixed By Design mod (for example a server crash exploit, remote code path, or data loss bug), report it privately.

Include the mod name, version, Minecraft version, Fabric Loader version, and steps to reproduce. Expect a reply within a few days.

Only the latest released version of each mod receives fixes. Older versions are not patched.