The following versions of JavelinAC are currently supported with security updates:

If you are running an unsupported version, please update to the latest release to ensure you receive security fixes.

If you discover a security vulnerability in JavelinAC, we ask that you do not open a public issue.
Instead, please report it through one of the following channels:

• GitHub Security Advisories: Use the "Report a vulnerability" feature.
• Email: Contact us at [email protected] (if available).

When reporting, please include:

• A clear description of the issue.
• Affected version(s).
• Steps to reproduce or a proof-of-concept.
• Any information about potential impact.

We aim to respond to initial reports within 3 business days.

We follow a coordinated disclosure approach:

1. We confirm receipt of your report.
2. We investigate the issue and determine severity.
3. We prepare and test a fix in a private branch or advisory fork.
4. Once the fix is ready, we release a patched version.
5. We publish a public Security Advisory to inform users, and if needed, request a CVE ID.

If a fix cannot be provided quickly, we will communicate available mitigations.

We value the security community and appreciate responsible disclosures.
Contributors who report valid vulnerabilities may be credited in the final advisory (with consent).

• Preferred language: English
• GitHub Security Advisories: Report a vulnerability
• Email: [email protected] (replace if needed)

This project is part of the Javelin Anti-Cheat initiative, focused on building fair and secure multiplayer environments.
Security is critical, and your help is appreciated in keeping JavelinAC safe for all users.