The Hagalaz team takes security seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
As an open-source project under active development, only the latest version of Hagalaz is officially supported. We encourage all users to run the latest version to benefit from the latest features and security patches.
| Version | Supported |
|---|---|
| Latest | ✅ |
| Older | ❌ |
If you discover a security vulnerability, please report it to us confidentially. Do not disclose the vulnerability publicly until it has been addressed.
To report a vulnerability, please use the GitHub Private Vulnerability Reporting feature. This is the preferred method as it ensures your report is delivered directly to the project maintainers. You can find this feature under the "Security" tab of the repository.
When reporting a vulnerability, please include the following information:
- A detailed description of the vulnerability, including the steps to reproduce it.
- The version of Hagalaz you are using.
- Any relevant logs, screenshots, or other supporting materials.
You can expect a response from us within 48 hours to acknowledge receipt of your report. We will do our best to keep you informed of our progress in addressing the vulnerability.