Security

SECURITY.md

Security Policy

Reporting Security Vulnerabilities

Report vulnerabilities to: [email protected]

Expected response time: 48 hours
Coordinated disclosure timeline: 90 days
GPG key available for encrypted communication

Supported Versions

Version	Supported
2.1.x	✅ Active support
2.0.x	✅ Security fixes
< 2.0	❌ End of life

Security Testing Scope

Framework vulnerability assessment
Dependencies security scanning
Input validation testing
Authentication bypass protection

Responsible Disclosure Process

We follow coordinated vulnerability disclosure (CVD) practices aligned with industry standards and professional ethics guidelines.

There aren’t any published security advisories