We support the latest released minor version of maltego-transforms with security fixes. Older versions may receive fixes at our discretion; we recommend always upgrading to the latest release.

If you believe you have found a security vulnerability in this project, please report it privately rather than opening a public GitHub issue.

Email: security@maltego.com

Please use a subject line that makes the report easy to route, for example:

[Security][maltego-transforms] <short vulnerability summary> - affects <version or commit>

Please include:

• A description of the vulnerability and its potential impact
• Steps to reproduce, or a proof-of-concept if available
• The version(s) affected
• Whether the report is embargoed, already reported elsewhere, or has a preferred disclosure timeline

We aim to acknowledge reports promptly and will work with you on a disclosure timeline once the issue is confirmed.

This policy covers the maltego-transforms SDK source in this repository. For vulnerabilities in Maltego products or services more broadly, please use Maltego's general security contact process.