| Version | Supported |
|---|---|
| 1.x.x | Security updates |
| 0.x.x | Best effort |
If you discover a security vulnerability in PQCAnalyzer, please report it responsibly:
- DO NOT open a public GitHub issue
- Email security@atkvn.com or use GitHub Security Advisories to report privately
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
- We will acknowledge within 48 hours
- We will provide a fix within 7 days for critical issues
This tool scans cryptographic configurations. Security issues in scope include:
- Command injection via user-supplied hostnames or file paths
- Path traversal in config file parsing
- Information leakage in report output
- Denial of service via malformed input
- Dependencies with known CVEs
- Sensitive data exposure (credentials, private keys)
- Issues in systems being scanned (that's what this tool is for)
- Social engineering
- Physical attacks