Security is a top priority for us. We are committed to addressing vulnerabilities in a timely and responsible manner to ensure the safety and reliability of our software. This document outlines the process for reporting and handling security vulnerabilities.

If you discover a security vulnerability in this project, we encourage you to report it as soon as possible using the following guidelines to help ensure a quick and efficient response.

You can report vulnerabilities using the following methods:

• Email: Send a detailed report to [email protected].
• GitHub Security Advisories: Submit a report through the GitHub Security Advisories page.
• GitHub Issues: If you prefer, you can create a private issue in this repository and label it with “security.” Ensure that the issue is kept private to protect sensitive information.

To help us investigate the vulnerability quickly and thoroughly, please include the following information in your report:

• Description: A clear, concise description of the vulnerability.
• Reproduction Steps: Instructions on how to reproduce the issue, including specific configurations or environments.
• Impact Assessment: A description of the potential impact of the vulnerability (e.g., data exposure, system compromise).
• Mitigation Recommendations: Suggestions for mitigating the vulnerability until a fix is deployed.

Upon receiving your report, we will:

• Acknowledge the receipt of your report within 48 hours.
• Provide an estimated timeline for investigation and resolution.

We will keep you informed throughout the process with regular updates on the status of the vulnerability, including:

• Confirmation of whether the vulnerability will be investigated.
• Progress updates during the assessment and remediation process.
• Final resolution and any actions taken, including patch release details.

After the vulnerability is confirmed and resolved:

• A patch or update will be released addressing the issue.
• We will credit you as the reporter in the release notes (if you wish).
• We will disclose the vulnerability, its impact, and the remediation steps taken to ensure the community is informed.

Thank you for helping us keep this project secure. Your cooperation and commitment to security are greatly appreciated. If you have any questions or need further assistance, please reach out to us.

Your contributions help maintain a secure and reliable environment for all users!