proton-sdk-rs/SECURITY.md

Security Policy

Supported Versions

Only the latest release of proton-sdk-rs receives security updates. If you discover a vulnerability, please update to the latest version before reporting.

Version	Supported
>= 0.1.x	✅
< 0.1.0	❌

Reporting a Vulnerability

We take the security of this project seriously. Because this SDK handles highly sensitive account credentials, session tokens, and zero-knowledge cryptographic keys, we request that security vulnerabilities be reported responsibly.

Please do not open a public GitHub issue for security-related bugs.

To report a vulnerability:

1. Send an email to the project maintainer at contact@narl.io (referencing the email in Cargo.toml).
2. Provide a detailed description of the vulnerability, including steps to reproduce, code snippets, or a proof of concept if available.
3. We will acknowledge receipt of your report within 48 hours and work with you to coordinate a security release.

Thank you for helping keep this SDK secure!