Waku and it's maintainers take security issues seriously. Vulnerabilities can be disclosed in private:

• GitHub advisories
• caffeine.02 on Signal (if immediate attention is needed)

Only the latest stable version of Waku is supported.

We appreciate your efforts to disclose your findings responsibly and will make every effort to acknowledge your contributions.

Thanks