Please report vulnerabilities privately using GitHub private vulnerability reporting: open the repository's Security tab and choose Report a vulnerability, or go to https://github.com/n0dal/MagnetRelay/security/advisories/new.

Do not report them in public issues.

The latest release on the Mac App Store and the main branch. Fixes are made on main.

In scope: the MagnetRelay app — how it handles magnet: URLs, stores your password in the Keychain, and talks to your download server — and the build scripts in this repository.

Out of scope: qBittorrent, Transmission, Deluge, rTorrent, Synology DSM / Download Station and your server's own setup. Please report those to their own projects or vendors.