We provide security updates for the current major version of pieuvre.
| Version | Supported |
|---|---|
| 0.8.x | Supported |
| 0.7.x | Security fixes only |
| < 0.7 | End of Life |
We take the security of pieuvre seriously. If you discover a security vulnerability, please report it through one of the following channels:
- GitHub Security Advisory: Open a private advisory on the repository.
- Maintainer Contact: Contact the maintainers directly via the information provided in the repository profile.
Please do not report security vulnerabilities through public GitHub issues.
To help us triage and resolve the issue quickly, please include the following in your report:
- Description: A detailed summary of the vulnerability.
- Reproduction: Clear steps or a proof-of-concept (PoC) to reproduce the issue.
- Impact: An assessment of the potential risk and impact.
- Mitigation: Any suggested fixes or temporary workarounds.
- Acknowledgment: We will acknowledge receipt of your report within 48 hours.
- Investigation: We will investigate the issue and provide a preliminary timeline for a fix.
- Updates: We will keep you informed of our progress throughout the remediation process.
- Release: Once a fix is verified, we will release a new version and provide credit for the discovery (if requested).
Thank you for helping us keep pieuvre secure.