Security

SECURITY.md

Security Policy

Reporting a Vulnerability

Please report vulnerabilities privately to the maintainers.

Response Targets

Initial acknowledgment: within 72 hours
Triage decision: within 7 days
Mitigation/release plan: communicated after triage

Scope

Input validation for time ranges, recurrence rules, and iCal parsing
Safety around timezone handling and date arithmetic
CI security scanning via CodeQL and gosec

Supported Versions

Security fixes are prioritized for the latest tagged release and main.

There aren’t any published security advisories