Please do not open a public GitHub issue for suspected security vulnerabilities.
Instead, report the issue privately through GitHub Security Advisories:
https://github.com/nimjs/nim-ui/security/advisories/new
Include:
- a clear description of the problem
- affected package or area
- reproduction steps or proof of concept
- impact assessment if known
We will acknowledge reports as soon as reasonably possible and coordinate a responsible disclosure process.
During early public development, security fixes are best-effort for:
| Version | Supported |
|---|---|
main |
Yes |
| latest published minor | Yes |
| older prereleases | No |
- Please give maintainers reasonable time to investigate and fix the issue before public disclosure.
- We may request additional validation details during triage.
- If a fix requires coordinated release notes, maintainers will prepare them before disclosure.