Currently, Aloo is in heavy development (Phase 1). Only the latest main branch is actively supported for security updates.
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
| < 0.1 | ❌ |
We take the security of Aloo seriously. If you believe you have found a security vulnerability in the Aloo engine or its dependencies, please report it to us as described below.
Please do not report security vulnerabilities through public GitHub issues.
Instead, please send an email to security@aloo-project.example.com.
Please include the following details with your report:
- Description of the location and potential impact of the vulnerability.
- A detailed description of the steps required to reproduce the vulnerability (POC scripts, network captures, and screenshots are highly encouraged).
- Your expected behavior vs the actual behavior.
We will acknowledge receipt of your vulnerability report within 48 hours and strive to send you regular updates about our progress. If you leave a public key, we will communicate securely.