Only the latest released version of each actively maintained project is supported with security updates unless that repository documents a different policy.

Please do not report suspected vulnerabilities in a public issue.

Report security vulnerabilities privately to informatica@nei-isep.org, including the affected repository/service, impact, reproduction steps and any relevant logs with secrets redacted.

We aim to acknowledge reports within 48 hours. If the issue is confirmed, the maintainers will coordinate remediation and disclosure according to severity and complexity.

If a repository contains a more specific SECURITY.md, that repository-specific policy takes precedence.