Do not report security vulnerabilities through public GitHub Issues.
If you discover a security vulnerability in this project, please disclose it responsibly by emailing:
Include the following in your report:
- A description of the vulnerability and its potential impact
- Steps to reproduce the issue (proof of concept if possible)
- Any relevant environment details (OS, version, configuration)
You can expect an acknowledgement within 48 hours and a full response or patch timeline within 14 days. For critical issues, a fix will be prioritized accordingly.
We appreciate responsible disclosure and will credit researchers in the changelog unless you prefer to remain anonymous.
Jangan laporkan kerentanan keamanan melalui GitHub Issues yang bersifat publik.
Jika Anda menemukan kerentanan keamanan di proyek ini, harap ungkapkan secara bertanggung jawab melalui email:
Sertakan dalam laporan Anda:
- Deskripsi kerentanan dan potensi dampaknya
- Langkah-langkah untuk mereproduksi masalah (proof of concept jika memungkinkan)
- Detail lingkungan yang relevan (OS, versi, konfigurasi)
Anda dapat mengharapkan pengakuan dalam 48 jam dan respons lengkap atau jadwal patch dalam 14 hari. Untuk masalah kritis, perbaikan akan diprioritaskan.
Kami menghargai pengungkapan yang bertanggung jawab dan akan mencantumkan kredit peneliti di changelog kecuali Anda memilih untuk tetap anonim.