Security

Report a vulnerability

SECURITY.md

Security Policy

Scope

Lampstand is a local indexing and search substrate for SocioProphet Linux environments.

Reporting

Please report vulnerabilities privately to the maintainers. Do not open public issues for unpatched security defects.

High-priority classes

cross-user data exposure
unauthorized indexing outside policy roots
extractor sandbox escape
query or history leakage
RPC authorization or trust-boundary bypass
forged or malicious extraction results
privileged collector abuse

There aren’t any published security advisories