The following versions of the project are currently supported with security updates:
| Version | Supported |
|---|---|
| 0.3.x | ✅ |
| 0.2.x | ✅ |
| 0.1.x | ❌ |
| < 0.1.0 | ❌ |
If you discover a security vulnerability, please follow these steps to report it:
- Do not disclose the vulnerability publicly: Please do not post vulnerability information in public issue trackers or forums
- Send an email: Send vulnerability details to ethereal49@outlook.com
- Provide detailed information: Include steps to reproduce, affected versions, and possible solutions
- We will acknowledge receipt of your report within 48 hours
- We will evaluate the report and determine its severity
- For confirmed vulnerabilities, a fix will typically be released within 30 days
- After the fix, we will credit contributors in the release notes (unless you request anonymity)
- Keep your system and dependencies updated
- Store sensitive information in environment variables and ensure they are not committed to version control
- Follow OWASP Security Guidelines
- Implement proper authentication and authorization for API endpoints
- Validate and sanitize API request inputs
Thank you for your contributions to project security.