Security

How to report a vulnerability

If you believe you have found a security vulnerability, please report it privately through one of the channels below, in order of preference. Do not open a public issue or disclose the details until we have had a chance to investigate and coordinate a fix.

Contact channels

1. Private vulnerability reporting — https://github.com/apimgr/pastebin/security/advisories/new
2. Encrypted report form — https://pste.us/server/contact?security_id=251485422c73e049. Following this link opens the security-report form; the report body is encrypted at rest and never stored in plaintext.
3. Email — security@pastebin

Details

• Preferred languages: en
• This information expires: 2027-09-18T08:54:46Z

More information

• Disclosure policy — scope, safe harbor, and coordinated-disclosure window
• Acknowledgments — researchers we have credited
• security.txt — the machine-readable version of this page (RFC 9116)