Skip to content

Security: 50RC3/vAIn

SECURITY.md

vAIn Security Policy

Supported Versions

vAIn is committed to maintaining a secure and reliable experience. Security updates are provided only for the following versions:

Version Supported
5.1.x
5.0.x
4.0.x
< 4.0

Running unsupported versions exposes you to potential vulnerabilities. Please upgrade to a supported version to ensure you benefit from the latest security fixes.

Reporting a Vulnerability

Since vAIn is a solo project with no dedicated website, all security communications are handled directly by me. If you discover a vulnerability, please follow these guidelines:

  • Contact Method:
    Report the issue by emailing me at vjjvr.vincent@gmail.com (replace with your preferred contact address).

  • Response Time:
    I aim to acknowledge vulnerability reports within 48 hours and will provide updates every 5 business days until the issue is resolved. Response times may vary, as I manage all aspects of the project personally.

  • Investigation Process:
    Every report is taken seriously. I will assess the vulnerability, determine its impact, and prioritize remediation. If your report is accepted, you will receive detailed information about the resolution process. If the report is deemed non-actionable or is a false positive, I will explain the reasoning.

  • Confidentiality & Public Disclosure:
    All details of your report will remain confidential until a fix is available. I follow a coordinated disclosure process to ensure both user safety and transparency.

Your efforts in reporting vulnerabilities are essential to maintaining a robust security posture for vAIn. Thank you for your contribution to improving project security.

There aren’t any published security advisories