PhotonAct is currently an early-alpha project. Security fixes are provided for the latest 0.0.x
release and the main branch.
Please do not open a public issue for a suspected vulnerability. Email
duanboyang@bupt.edu.cn with the subject [PhotonAct Security] and
include:
- the affected version or commit;
- a minimal reproduction or proof of concept;
- the expected impact; and
- any suggested mitigation, if available.
You should receive an acknowledgement within seven days. Fix and disclosure timing will depend on the severity and complexity of the report. Please allow time for a coordinated fix before public disclosure.
PhotonAct loads user-provided CSV and JSON data. Treat untrusted files cautiously and do not include secrets, personal data, or unpublished research data in public bug reports.