The project accepts security fixes for the latest released version and current main branch.
| Version | Supported |
|---|---|
| Latest release | Yes |
| main branch | Yes |
| Older releases | Best effort |
Please do not open public issues for security vulnerabilities.
Use one of these channels:
- GitHub Security Advisory: https://github.com/galihru/orbinex/security/advisories/new
- Security Policy page: https://github.com/galihru/orbinex/security/policy
Please include:
- A clear description of the issue.
- Reproduction steps or proof of concept.
- Potential impact and affected versions.
- Any suggested remediation.
- Initial acknowledgment: within 72 hours.
- Triage and severity assessment: within 7 days.
- Fix timeline: depends on impact and complexity.
- We coordinate disclosure with reporters when possible.
- Critical issues are prioritized for hotfix release.
- Public disclosure happens after patch availability.