We take security seriously and actively maintain security updates for the following versions of our project:
| Version | Supported |
|---|---|
| 0.2.x | ✅ |
| < 0.2 | ❌ |
We appreciate your help in keeping our project secure. If you discover a security vulnerability, please report it responsibly by emailing us at support[@]figform.com.
To help us understand and address the issue quickly, please provide:
- Location: Where you found the vulnerability (specific components, files, or areas of the application)
- Vulnerability Type: The nature of the security issue (e.g., injection flaws, authentication bypass, data exposure, etc.)
- Source References: File paths, URLs, or code snippets that demonstrate the vulnerability
- Reproduction Steps: Clear, step-by-step instructions to reproduce the issue
- Environment Details: Any specific configuration or setup needed to reproduce the vulnerability
- Proof of Concept: If available, include working exploit code or screenshots
- We'll acknowledge receipt of your report within 48 hours
- We'll investigate and provide an initial assessment within 5 business days
- We'll keep you updated on our progress and notify you when the issue is resolved
Thank you for helping us maintain a secure environment for all users.