I appreciate the opportunity to investigate and develop fixes before public disclosure.
I will not publish details in a public issue or PR until a fix is available.
This project follows a 90 day disclosure timeline.
Security is very important to this project. If you have any issue regarding security, please disclose the information responsibly by following these steps:
- Please, Do NOT create a public issue or pull request
- Please email security@voidwarex.com with the Required Information
- Alternatively, use GitHub's private vulnerability reporting feature
To help me assess the issue, please provide:
- A summary of the problem
- Affected versions
- If possible, steps to reproduce the vulnerability (proof-of-concept code is ideal)
- If known, mitigations for the issue
As a single-maintainer project, I will acknowledge receipt within [e.g., 7 days] and work to address the issue as soon as possible.