Files
bookorbit/.github/SECURITY.md
T
neon f6394a9b0c security: remediate dependency and code scanning alerts
Upgrade vulnerable transitive dependencies and harden filesystem, URL, HTML, cryptographic, and input-processing boundaries identified by security scans.
2026-07-15 18:42:07 +00:00

571 B

Security Policy

Reporting a Vulnerability

Use GitHub's private vulnerability reporting to report security issues confidentially. Do not open public issues for security vulnerabilities.

We aim to acknowledge vulnerability reports within 3 business days and provide a status update within 14 days. Please allow up to 90 days for investigation, remediation, and coordinated disclosure before publishing details. Critical vulnerabilities may be disclosed and fixed sooner when users face active risk.