> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vana.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Security acknowledgements

> Researchers who have responsibly reported security issues in Vana components.

We thank the security researchers who report issues to us responsibly at [dev@vana.com](mailto:dev@vana.com). Researchers are listed here after the issue they reported has been fixed. Vana does not currently run a bug bounty program.

To report an issue, see [Responsible disclosure](https://docs.vana.org/security/overview.md#responsible-disclosure).

| Researcher | Reported | Fixed |
| - | - | - |
| [ibnu76](https://github.com/ibnu76) | Personal Server device login approval | October 2026 |
| [Rafael Rezki (GURKI)](https://www.linkedin.com/in/rezkyrafael) | Personal Server local approval listener; legacy Connect app sign-in and site metadata fetcher | October 2026 |
| iblitzc0de | Personal Server data listing without a grant | October 2026 |
| jex | Legacy Connect app signing endpoint | October 2026 |
| slue | Request signature lifetime in Personal Server and SDK | October 2026 |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.