This repository is xvyimu/TransitHub, an independently maintained AGPL-3.0 derivative of QuantumNous new-api.
| Version | Supported |
|---|---|
| Latest tip on this repository | ✅ |
| Older / upstream-only tags | Best-effort; prefer latest TransitHub tip |
Do NOT report security vulnerabilities in public GitHub Issues.
Preferred for this fork / TransitHub:
- GitHub Security Advisories on this repo:
https://github.com/xvyimu/TransitHub/security/advisories/new - Or open a private channel the maintainer documents (do not paste secrets in public issues).
If the issue is clearly present in upstream QuantumNous new-api as well, you may also report there so both lines can fix:
- Upstream advisories: https://github.com/QuantumNous/new-api/security/advisories/new
- Upstream bulk-report policy (their SECURITY.md) still applies to their inbox — do not spam bulk reports without coordinating with the receiving project.
- Description of the vulnerability and impact
- Steps to reproduce (PoC)
- Affected version / commit of TransitHub (
git rev-parse HEAD) - Any suggested fix
Please allow reasonable time for a fix before public disclosure.