Report vulnerabilities privately through GitHub Security Advisories.

Please include:

• Steps to reproduce
• Affected version / OS
• Logs with secrets removed (never paste IPINFO_TOKEN or case data)

Expect an acknowledgement within 72 hours and a fix or mitigation plan within 14 days for validated reports.

IP Analyzer is a defensive local tool for authorized forensic work. Vulnerabilities in ipinfo.io, PySide6, or the OS itself are out of scope unless they affect the app's handling of untrusted input files or tokens.