Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
1.x.x	✅

Reporting a Vulnerability

If you discover a security vulnerability, please report it via:

GitHub Security Advisories: Submit an advisory
Email: Contact the maintainer privately

Please DO NOT report security issues via public GitHub Issues.

Response Timeline

Acknowledgment: Within 48 hours
Initial assessment: Within 7 days
Fix timeline: As soon as possible, typically within 30 days

Scope

The following are in scope for security reports:

Authentication/authorization bypass
SQL injection in API endpoints
XSS vulnerabilities in frontend
Data exposure through misconfiguration
Dependency vulnerabilities

Out of Scope

Social engineering attacks
Physical security issues
DDoS attacks

There aren't any published security advisories