Only the latest release of Ward receives security fixes.
| Version | Supported |
|---|---|
| latest | Yes |
| older | No |
Ward is a security tool — vulnerabilities in it undermine the people relying on it. Please report them responsibly.
Do not open a public GitHub issue for security vulnerabilities.
Instead, use one of the following:
- GitHub private vulnerability reporting (preferred): go to the Security tab of this repo and open a private advisory.
- Email: reach out directly to the maintainer via the contact information on their GitHub profile.
- A clear description of the vulnerability
- Steps to reproduce
- Potential impact
- A suggested fix if you have one
- Acknowledgement within 72 hours
- A fix or mitigation plan communicated to you within 14 days for confirmed issues
- Credit in the release notes if you wish (just let us know your preferred name/handle)
Thank you for helping keep Ward and its users safe.