GhostSoap handles the personal details of the person using it, so a flaw in how it stores or sends them matters.

Please report a vulnerability privately through this repository's private vulnerability reporting (Security tab, 'Report a vulnerability', or https://github.com/EquityBot/GhostSoap/security/advisories/new), not in a public issue. Include the version or commit, what you did, and what you saw.

In scope: anything that exposes the user's profile, requests or replies; sends data the user did not choose to send; or weakens the encryption of the state file.