We actively support and maintain only the latest version of the project. Please ensure you are using the latest version to receive security updates.
| Version | Supported |
|---|---|
| Latest | ✅ |
| Older | ❌ |
If you discover a security vulnerability, please take the following steps:
- Do Not Disclose Publicly: Please refrain from posting about the vulnerability on public forums, social media, or issue trackers until we have had a chance to address it.
- Reproduce the Issue: Ensure the vulnerability can be reliably reproduced and is not a false positive.
- Provide Detailed Information: Include details about the environment in which the vulnerability was discovered (e.g., operating system, version of the project, etc.), steps to reproduce the issue, and any potential impact it might have.
- Upon receiving a vulnerability report, we will acknowledge the submission within 48 hours.
- We will then evaluate the report, validate the vulnerability, and determine the severity of the issue.
- If the issue is confirmed, we will work on a fix and provide an estimated timeline for a resolution.
- We will notify you when the vulnerability has been addressed and a fix has been released.
Please submit your vulnerability reports in English.
We will release security updates as needed. Please make sure your project dependencies are up-to-date to mitigate any known vulnerabilities.
We publicly acknowledge the contributions of those who responsibly disclose vulnerabilities when the issue is resolved.
We appreciate your efforts to help us maintain the security and integrity of our project. Your participation ensures that our community remains a safe and trustworthy environment for everyone.