Only the latest release on the main branch is actively supported with security updates.
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
We take the security of SirDeep and the privacy of community members very seriously.
If you discover a security vulnerability, please DO NOT open a public GitHub issue. Public issues expose server owners to potential attacks before a fix is available.
Please report security issues privately via:
- GitHub Private Vulnerability Reporting: Use the "Report a vulnerability" button under the Security tab of this repository.
- Direct Contact: Email the OpenWinter Core Security Team or contact the repository owner directly.
To help us triage and resolve the issue quickly, please include:
- Description of the vulnerability and its potential impact.
- Step-by-step proof-of-concept (PoC) to reproduce the issue.
- Affected components (e.g. AI engine, FFmpeg audio streamer, audit logger).
- Proposed patch or mitigation if available.
- Initial Acknowledgement: Within 48 hours.
- Status Update & Assessment: Within 5 business days.
- Public Release of Patch: Coordinated disclosure after fix validation.