lilylabs/disclosure
Submit

// submit report

Report a Security Issue

Provide as much detail as possible. We respond to every valid submission within 3 business days.

A short, clear summary of the issue.

Severity*

The specific URL, endpoint, or component affected.

Describe the issue and why it matters.

Step-by-step instructions so we can reproduce the issue.

Attachments

Drop files here or browse

Up to 10 files · 10MB max each · images, video, .log, .txt, .pdf

Screenshots, screen recordings, logs, or PoC files.

Optional, but required if you want a response or to be eligible for rewards / Hall of Fame.

Without contact info, we cannot reward you or update you on the fix.