We take security seriously and appreciate your efforts to responsibly disclose any vulnerabilities you find. To report a security issue, please follow these steps:
- Do Not Open a Public Issue: Please do not open a public issue on GitHub to report a security vulnerability.
- Open a private issue. Please include as much detail as possible, including:
- A description of the vulnerability.
- Steps to reproduce the issue.
- Any relevant logs or screenshots.
- Response Time: We will acknowledge your issue within 48 hours and provide an estimated timeline for when you can expect a more detailed response.
- Fix and Disclosure: Once the issue is confirmed, we will work on a fix and coordinate with you on the disclosure timeline.
We provide security updates for the following versions of our project:
| Version | Supported |
|---|---|
| 1.2.x | ✅ |
| 1.1.x | ❌ |
| 1.0.x | ❌ |