| Version | Supported |
|---|---|
| 2.x | ✅ |
| 1.x | ❌ |
If you discover a security vulnerability, please report it responsibly:
- Do NOT open a public GitHub issue
- Email: security@psb-online.test
- Include steps to reproduce
- Allow 48 hours for initial response
- bcrypt password hashing
- CSRF protection on all forms
- SQL injection prevention via Eloquent ORM
- XSS prevention via Blade auto-escaping
- Login rate limiting (5 attempts/minute)
- Session fixation protection
- Audit logging for admin actions