Skip to content

Security: lingarobotics/LGC-Concept-AI

SECURITY.md

Security Policy

Supported Versions

The following versions of LGC Concept AI are currently supported with security updates:

Supported Versions

Version Supported
2.0.0 (latest) ✅ Yes
< 2.0.0 ❌ No

Note: The current latest stable release is v2.0.0. Only the latest version receives security updates.

Only the latest version on the main branch receives security fixes.
Users are strongly encouraged to stay up to date.


Reporting a Vulnerability

If you discover a security vulnerability in LGC Concept AI, please report it responsibly.

📌 How to Report

  • Do NOT create a public GitHub issue for security vulnerabilities.
  • Send details via private communication using one of the following:

🧾 What to Include

Please include:

  • A clear description of the vulnerability
  • Steps to reproduce the issue
  • Affected files, components, or configurations
  • Potential impact (data leak, logic abuse, auth bypass, etc.)
  • Any proof-of-concept (if available)

⏳ Response Timeline

  • Initial acknowledgment: within 48–72 hours
  • Status update: within 7 days
  • Fix or decision: depends on severity and complexity

✅ If Accepted

  • The issue will be investigated and fixed
  • A patch or mitigation will be released
  • Credit will be given (if requested)

❌ If Declined

  • You will receive a clear explanation
  • No public disclosure without mutual agreement

Disclosure Policy

Please allow reasonable time for fixes before any public disclosure.
Responsible disclosure helps keep users and learners safe.


Philosophy

LGC Concept AI values security, clarity, and trust over speed or hype.
Security issues are treated as engineering problems.

There aren’t any published security advisories