We are currently working on release 1.0.0. This version will be continuously updated with security updates and patches.
| Version | Supported |
|---|---|
| 1.0.0 | ✅ |
Please report security vulnerabilities to this e-mail address: fritzschubert21@outlook.de. If you have found a security vulnerability or similar, this is the only and best way to inform us.
- Response time: We strive to process all reported vulnerabilities as quickly as possible. You can expect confirmation of your report within 48 hours.
- Ongoing updates: We will keep you informed of the progress of your reported vulnerability and provide you with regular status updates.
We treat all reported vulnerabilities confidentially and ask you to do the same. Please do not share information about reported vulnerabilities publicly until we have fixed them and security updates have been released.
Thank you for your cooperation in keeping our project secure!
- Weekly CVE scans with OWASP plugin (https://owasp.org/www-project-dependency-check/)
- Regular updates of the libraries used
- Use of the Dependabot on GitHub