Security Policy Supported Versions We are committed to maintaining the security of our software across all release versions. The following table outlines the versions of our project that are currently supported with security updates:
Version Supported Latest :white_check_mark: Older Releases :white_check_mark: Note: While we strive to provide security updates for all releases, the extent of support might vary based on the version's age and technical feasibility.
Reporting a Vulnerability We take the security of our software seriously and value any kind of input that would help us improve. If you believe you have found a security vulnerability in our software, please follow these steps to report it to us:
Contact Us: Send us an email at cto@ujaotech.com with the details of the vulnerability. Please include as much information as possible, such as the steps to reproduce the vulnerability, its potential impact, and any suggestions you might have for its resolution.
Confidentiality: Please keep the information about any vulnerabilities you've discovered confidential until we have had the chance to resolve it.
Acknowledgment: We aim to acknowledge receipt of your report within 48 hours.
Updates: You can expect a regular update on the progress of resolving the issue every 5 working days.
Disclosure: Once the issue is resolved, we will work with you to publicly disclose the vulnerability in a responsible manner.
Recognition: We believe in recognizing the efforts of those who responsibly disclose security vulnerabilities. We will acknowledge your contribution in our release notes or on our website, as per mutual agreement.
Expectations and Responsibilities When a vulnerability is reported, we will:
Assess the vulnerability and determine its severity and potential impact. Work diligently to verify and reproduce the issue. Develop a fix or mitigation strategy and release a patch as soon as is practically possible. Communicate transparently with the reporter and our user community about the issue and its resolution. We appreciate your assistance in keeping our software secure and look forward to collaborating with you.