If you discover a security vulnerability in this project, please report it to us via email at [email protected]. We take security seriously and will respond to confirmed issues promptly.
This security policy applies to the following parts of the project:
- Version 2.5 and above.
- Specific branches:
master
.
You can reach out to us regarding security concerns at [email protected].
Upon receiving a security report, we will acknowledge it within 48 hours (2 business days). We aim to provide a fix or mitigation plan within 7 days of acknowledgment.
We follow a 30-day disclosure timeline after a vulnerability is reported and confirmed. This allows us to release patches and notify users before full disclosure.
To ensure the security of our project, we encourage users and contributors to follow these best practices:
- Keep dependencies up-to-date.
- Use strong and unique passwords.
- Enable multi-factor authentication.
- Regularly review and audit access permissions.