| Version | Supported |
|---|---|
1.0.x (latest) |
✅ Yes |
< 1.0.0 |
❌ No |
Do not open a public GitHub issue for security vulnerabilities.
If you discover a security vulnerability in this project, please report it privately via one of these channels:
- GitHub Security Advisories: Report a vulnerability
- Maintainer Security Email:
miguel@developmi.comorsecurity@sos-animales.org— encrypt with PGP if the finding is critical (GPG key available upon request or via repository security advisories).
Include in your report:
- Description of the vulnerability and its potential impact.
- Detailed steps to reproduce or a proof-of-concept (PoC).
- Affected versions and environment details.
- Any suggested mitigations.
| Stage | Target Time |
|---|---|
| Acknowledgment | 48 hours |
| Initial assessment & CVSS categorization | 5 business days |
| Fix or mitigation | 30 days (critical: 7 days) |
| Public disclosure | After fix is available |
- Submission: Send detailed reproduction steps, PoC, and environment details via private advisory or email.
- Acknowledgment: You will receive a response within 48 hours confirming receipt.
- Assessment: The vulnerability will be evaluated, categorized by CVSS score, and prioritized.
- Resolution: A remediation patch will be released, and credit will be acknowledged in the release notes unless anonymity is requested.