We provide security updates and patches for the current major release of create-express-modular.
| Version | Supported |
|---|---|
| 3.3.x | ✅ |
| < 3.3.0 | ❌ |
We take the security of create-express-modular and the projects it generates very seriously. If you discover a security vulnerability, please do NOT open a public issue on GitHub.
Instead, please report it privately:
- GitHub Security Advisory (Recommended): Submit an advisory through the repository's Security Advisories tab.
- Email: Send details directly to
captainlevi9111@gmail.com.
To help us triage and resolve the issue quickly, please include:
- A clear description of the vulnerability.
- Steps or a minimal reproduction script demonstrating the issue.
- Potential impact and threat scenario.
- Suggested remediation or patch (if available).
- Acknowledgment: Within 48 hours of receipt.
- Initial Assessment: Within 5 business days.
- Fix & Disclosure: We will coordinate a patch release and disclose the advisory publicly once resolved.