Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
1.0.x	✅

Reporting a Vulnerability

Please report security vulnerabilities to the maintainers privately. DO NOT open a public issue for security vulnerabilities.

Email: Contact the maintainer
Private GitHub Security Advisory: Use GitHub's private reporting
Wait for acknowledgment (usually within 48 hours)
Coordinate disclosure timeline

Scope

Authentication/authorization bypasses
Data exposure
Remote code execution
Injectable code
Dependency vulnerabilities

Out of Scope

Social engineering
Physical security
Denial of service (baseline)
Features marked experimental

There aren't any published security advisories