Only the latest pre-release version on the main branch receives active security updates.

If you discover a potential security vulnerability in VanillaEDI, please do not open a public GitHub issue.

Instead, please report it privately:

1. Email the maintainer team directly or submit a report via GitHub Security Advisories on the repository's "Security" tab.
2. Provide a detailed description of the issue and steps or proof-of-concept code to reproduce it.

• Acknowledgement: We will acknowledge receipt of your vulnerability report within 48 hours.
• Assessment: We will assess the impact and provide an estimated fix timeline within 5 business days.
• Resolution: A patched security fix will be released as soon as possible, with full credit given to the reporter (unless anonymity is requested).