Skip to content

Security: Nex-Devz/YuKumo

Security

SECURITY.md

🔒 Security Policy

Thank you for helping keep YuKumo secure.

If you discover a security vulnerability, please do not open a public issue or discussion. Responsible disclosure helps protect all users until a fix is available.


✅ Supported Versions

Version Status
1.x ✅ Supported
< 1.0 ❌ Not Supported

🛡️ Reporting a Vulnerability

Please report vulnerabilities privately through GitHub Security Advisories:

👉 https://github.com/Nex-Devz/YuKumo/security/advisories/new

If GitHub Security Advisories are unavailable, you may also contact the maintainers via email.

Include the following in your report

  • Vulnerability description
  • Steps to reproduce
  • Proof of Concept (if available)
  • Affected version(s)
  • Impact assessment
  • Suggested mitigation (optional)

🚀 Response Timeline

Stage Target
Initial response Within 48 hours
Investigation As soon as possible
Security fix Depends on severity
Public disclosure After a patch is released

🤝 Responsible Disclosure

Please allow us reasonable time to investigate and release a fix before publicly disclosing any vulnerability.

Once the issue has been resolved, a coordinated security advisory and patch release will be published.

Thank you for helping keep YuKumo secure for everyone. ❤️

There aren't any published security advisories