Skip to content

Repository navigation

Security: KanadeK/roomreceipt

Security

Report a vulnerability

SECURITY.md

Security policy

Supported versions

The latest tagged release receives security fixes.

Report privately

Use GitHub private vulnerability reporting for:

  • ZIP path traversal or extraction concerns;
  • a verifier bypass;
  • unsafe filesystem writes;
  • unexpected network transmission;
  • dependency vulnerabilities with a practical RoomReceipt impact.

Do not include real property photos, addresses, tenant names, or other personal data. Use the synthetic fixture or a minimal generated reproducer.

Response goals

  • Acknowledge within 7 days.
  • Triage and share an initial severity assessment within 14 days.
  • Coordinate a fix and disclosure timeline based on exploitability.

There aren't any published security advisories