Please report vulnerabilities privately:
- GitHub: use private vulnerability reporting
- Telegram: t.me/keybleed
Include a file or input that reproduces the issue. Expect a reply within a few days.
nibkit parses untrusted binary files. Crashes, hangs, and memory exhaustion from malformed input are in scope; the ideal report includes the exact input.