Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

We currently support only the latest release of beets.

Reporting a Vulnerability

To report a security vulnerability, please send email to our Zulip team.

# beets_XSS_01 Vulnerability Report: We discovered a XSS vulnerability in the beets project
GHSA-3gxm-wfjx-m847 published Apr 20, 2026 by snejus
Moderate

Learn more about advisories related to beetbox/beets in the GitHub Advisory Database