Only the latest stable version receives security updates.

If you discover a security vulnerability within this project, please follow these steps:

Security vulnerabilities should be reported privately to allow time for a fix.

Contact the maintainer directly:

📧 Email: miladvf2014@gmail.com

Please include:

• Description of the vulnerability
• Steps to reproduce (if possible)
• Potential impact
• Any suggested fixes (optional)

For highly sensitive reports, you can request a GPG key via email.

This project includes the following security features:

Currently, there are no known security vulnerabilities in this project.

If you find one, please report it using the process above.

# Run all security tests
python -m unittest discover tests/security -v

# Run specific security test
python tests/security/test_xss_prevention.py
python tests/security/test_dos_attack.py
python tests/security/test_memory_exhaustion.py
python tests/security/test_unicode_attacks.py

This project uses automated dependency scanning via GitHub Actions.

To check dependencies manually:

# Install safety
pip install safety

# Check requirements file
safety check -r requirements_full.txt

# Check installed packages
safety check --full-report

We follow industry-standard responsible disclosure practices:

1. Reporter privately discloses the vulnerability
2. Maintainer acknowledges within 48 hours
3. Fix is developed and tested
4. Patch is released
5. Vulnerability is publicly disclosed (with credit to reporter)

Security researchers who report valid vulnerabilities will be:

• Credited in the CHANGELOG
• Added to the CONTRIBUTORS list
• Thanked publicly (if desired)

• Security Testing Guide
• Contributing Guidelines
• MIT License

Thank you for helping keep this project secure! 🔒

⬆ Back to Top