Please do not publish exploitable security issues in a public GitHub issue. Email wolklawgaming@gmail.com instead. Include the toolkit version, the build you installed (setup or portable), and the steps needed to reproduce the issue.

Expect an acknowledgement within a few days. Once a fix ships, the release notes credit the reporter unless you ask to stay anonymous.

OSRS Toolkit never needs a Jagex password, bank PIN, authenticator code, or RuneScape session credential. Anyone asking for those details in connection with this project should be treated as untrusted.

Only the latest released version is actively supported.