We are committed to maintaining the security and integrity of our project. The following table outlines the versions of the project that are currently supported with security updates:
Version | Supported |
---|---|
1.0.x | ✅ |
< 1.0 | ❌ |
If you discover a security vulnerability within this project, we encourage you to notify us as soon as possible. We appreciate your efforts to responsibly disclose your findings.
How to Report:
- Email: Please send an email to [email protected] with the subject line: "Security Vulnerability Report".
- Include:
- A detailed description of the vulnerability.
- Steps to reproduce the issue.
- Any potential impact or exploit scenarios.
- (Optional) Your contact information for follow-up questions.
What to Expect:
- Acknowledgment: We will try to acknowledge your report within 48 hours.
- Investigation: Our team will investigate the reported vulnerability.
- Updates: You will receive updates on the status of the issue as we work to resolve it.
- Resolution: We aim to resolve critical vulnerabilities within 7 business days.
- Credit: Upon request, we are happy to give you credit for your discovery in the project's release notes.
Important Notes:
- Please do not disclose the vulnerability publicly until we have addressed it.
- Avoid exploiting the vulnerability beyond what is necessary to demonstrate it.
- Your report will be kept confidential.
Thank You
We sincerely appreciate your efforts in keeping our project and community safe!