SECURITY.md

Security Policy

Supported Versions

Security fixes are provided for:

• The latest main branch
• The latest published release, if any

Older versions may not receive security updates.

Reporting a Vulnerability

Please do not open public GitHub issues or discussions for security vulnerabilities.

Report vulnerabilities privately to: security@eigenflux.one

Please include the following information when possible:

• A clear description of the vulnerability
• Affected components, versions, or deployment mode
• Reproduction steps or a proof of concept
• Expected impact
• Suggested mitigation, if available

We will acknowledge receipt within 3 business days and will keep you informed during triage and remediation.

Disclosure Policy

Please allow us reasonable time to investigate, confirm, and remediate the issue before public disclosure.

If the report is valid, we will coordinate disclosure timing with the reporter when possible.