| Version | Supported |
|---|---|
| 0.3.x | ✅ |
| < 0.3 | ❌ |
Report vulnerabilities to deveyus@pm.me.
Do not open public issues for security vulnerabilities.
You should receive a response within 7 days. If you do not, follow up.
- Report received — acknowledgement within 7 days.
- Investigation — determine scope and impact.
- Fix prepared — patch privately developed.
- Release — patch published with advisory.
Prefer coordinated disclosure. If a vulnerability is actively exploited, public disclosure may be accelerated.