Yuva is pre-alpha. Do not use it for production data yet.
Until 1.0, only the latest 0.0.x release gets security fixes. Upgrade to it before reporting, and expect fixes to ship as a new 0.0.x release rather than as patches to older ones.
| Version | Supported |
|---|---|
| latest 0.0.x | yes |
| older 0.0.x | no |
unreleased main |
best effort |
Report a vulnerability privately through GitHub's private vulnerability reporting: Security → Report a vulnerability on https://github.com/productdevbook/yuva (https://github.com/productdevbook/yuva/security/advisories/new), or by e-mail to [email protected]. Do not open a public issue for it.
Include the affected version or commit, the steps to reproduce and the impact you see. You will get an answer within 7 days. Fixes are released before the report is made public, and reporters are credited unless they ask not to be.