Skip to content

Security: robkam/ytree

SECURITY.md

Security Policy

Supported Versions

Only the latest version on the main branch is supported. Older releases/tags are not supported; please upgrade.

Reporting a Vulnerability

Please do not open a public GitHub Issue or Pull Request for security-sensitive bugs.

Email: robkam at gmx dot com

Include:

  • ytree version/commit (ytree --version)
  • OS / distro / terminal
  • Steps to reproduce (and a PoC if possible).
  • Impact (crash, info leak, command execution, archive traversal, etc.)

Response Expectations

I'll attempt a fix as soon as I can. There is no bug bounty.

Non-Security Bugs

For non-security bugs and feature requests, use GitHub Issues.

For trust/safety claims and evidence links, see docs/TRUST.md.

There aren't any published security advisories