If you discover a security vulnerability in Claude Code++, please report it responsibly:
- Do not open a public GitHub issue for security vulnerabilities
- Email security concerns to the maintainers directly
- Include details about the vulnerability and steps to reproduce
Email: [email protected]
Claude Code++ implements several security measures:
- All user inputs are validated before processing
- SQL injection prevention with parameterized queries and LIKE pattern escaping
- Path traversal prevention for configuration file loading
- Redis connections use authentication when configured
- Sensitive data is not logged
- Session data has configurable TTL for automatic expiration
- No hardcoded secrets or credentials
- Environment variables for all sensitive configuration
- Thread-safe operations with proper locking
| Version | Supported |
|---|---|
| 1.x | ✅ |
Security updates will be released as patch versions. Users are encouraged to keep their installations up to date.