Currently, only the latest main branch version of Vibe Social is actively supported with security updates.
| Version | Supported |
|---|---|
main |
✅ |
< 1.0 |
❌ |
Security is a top priority for Vibe Social. If you discover a security vulnerability within the platform, please follow these steps:
- Do not disclose the vulnerability publicly.
- Send an email to the repository maintainer outlining the vulnerability, steps to reproduce, and any potential impact.
- We will acknowledge receipt of your vulnerability report within 48 hours and strive to send you regular updates about our progress.
- In Scope: Session hijacking, XSS, SQL Injection (though mitigated via parameterized queries and
sql.js), directory traversal in image uploads. - Out of Scope: Volumetric DDoS attacks, vulnerabilities in third-party libraries (unless actionable by updating).
Thank you for helping keep Vibe Social secure.