Security fixes are released for the latest minor version of equasis-cli.

Please report vulnerabilities privately, either through GitHub private vulnerability reporting or by e-mail to rhinonix.github.exclaim769@slmail.me.

Include a description of the issue, the steps to reproduce it, the affected version, and its potential impact. You can expect an acknowledgement within five working days. Please allow time for a fix to be released before disclosing the issue publicly.

Examples of issues to report:

• Exposure of Equasis credentials, for example through logs, error messages, file permissions, or saved output
• Writing files outside the location the user asked for
• Vulnerabilities in how equasis-cli handles content received from Equasis

Problems with the Equasis website itself should be reported to Equasis.

• Prefer equasis configure --setup or environment variables over --password, which is visible in shell history and process listings.
• The credentials file and page cache are created readable only by you. Keep it that way.
• Pages saved with --save-html and the page cache contain your Equasis account name. Remove it before sharing a page.