mirror of
https://github.com/narrrl/proton-sdk-rs.git
synced 2026-11-03 16:41:26 +01:00
24 lines
1.0 KiB
Markdown
24 lines
1.0 KiB
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
Only the latest release of `proton-sdk-rs` receives security updates. If you discover a vulnerability, please update to the latest version before reporting.
|
|
|
|
| Version | Supported |
|
|
| ------- | --------- |
|
|
| >= 0.1.x | :white_check_mark: |
|
|
| < 0.1.0 | :x: |
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
We take the security of this project seriously. Because this SDK handles highly sensitive account credentials, session tokens, and zero-knowledge cryptographic keys, we request that security vulnerabilities be reported responsibly.
|
|
|
|
**Please do not open a public GitHub issue for security-related bugs.**
|
|
|
|
To report a vulnerability:
|
|
1. Send an email to the project maintainer at `contact@narl.io` (referencing the email in `Cargo.toml`).
|
|
2. Provide a detailed description of the vulnerability, including steps to reproduce, code snippets, or a proof of concept if available.
|
|
3. We will acknowledge receipt of your report within 48 hours and work with you to coordinate a security release.
|
|
|
|
Thank you for helping keep this SDK secure!
|