We actively support the following versions of VMIPS Rust:
| Version | Supported |
|---|---|
| 0.2.x | ✅ |
| < 0.2 | ❌ |
If you discover a security vulnerability in VMIPS Rust, please report it responsibly:
- Do not create a public GitHub issue for security vulnerabilities
- Email the maintainer directly at: muditbhargava66@gmail.com
- Include a detailed description of the vulnerability
- Provide steps to reproduce the issue if possible
- Include any relevant code snippets or proof-of-concept
- Initial Response: Within 48 hours of receiving the report
- Assessment: Within 1 week of initial response
- Fix Timeline: Critical vulnerabilities will be addressed within 2 weeks
- Disclosure: Public disclosure will occur after a fix is available
When using VMIPS Rust:
- Always validate input assembly files before processing
- Run simulations in isolated environments when processing untrusted code
- Keep dependencies updated to their latest secure versions
- Use the latest stable version of VMIPS Rust
Thank you for helping keep VMIPS Rust secure!