We take the security of MyTypist seriously. If you discover a security vulnerability, please report it responsibly.
Do not open a public GitHub issue for security vulnerabilities.
Instead, email the maintainers directly or reach out via the repository's security advisory tab.
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Any suggested fixes (if known)
- Acknowledgment: Within 48 hours
- Assessment: Within 5 business days
- Fix deployment: Depends on severity (critical: 72 hours)
This policy covers:
- Authentication and authorization vulnerabilities
- Data exposure or leakage
- Injection vulnerabilities (SQL, XSS, etc.)
- File upload security issues
Out of scope: documentation typos, feature requests, third-party dependency CVEs.