We take security seriously. If you discover a security vulnerability, please report it privately.
Do not create a public GitHub issue for security vulnerabilities.
Instead, send a description of the issue to the project maintainer via:
- GitHub Security Advisory: Navigate to the repository's Security tab and click "Report a vulnerability"
- Email: Reach out to the repository owner directly
We will acknowledge receipt within 48 hours and provide an estimated timeline for a fix.
Security issues include:
- Remote code execution
- Injection vulnerabilities
- Authentication bypass
- Sensitive data exposure
- Dependency vulnerabilities with known CVEs
| Version | Supported |
|---|---|
| 1.x | ✅ |
| < 1.0 | ❌ |