Files
WeChat-AI/SECURITY.md
T

1.2 KiB

Security Policy

Supported Versions

The following versions of the project are currently being supported with security updates:

Version Supported
0.12.x
0.11.x
0.10.x
< 0.10

Reporting a Vulnerability

Please report security vulnerabilities by opening a private issue or contacting the maintainers directly.

  • Where to report: Open an issue on the repository or email the maintainers directly. Do not disclose vulnerabilities publicly before they have been addressed.
  • Response time: You can expect an acknowledgement of your report within 48 hours, and a status update on the reported vulnerability at least once per week.
  • What to expect if accepted: The vulnerability will be assigned a severity level, tracked privately, and a fix will be prioritized based on severity. A security advisory and patch release will be published once the fix is ready.
  • What to expect if declined: If the report is determined not to be a vulnerability, you will receive a detailed explanation of why it was declined.