We actively maintain and provide security patches for the following versions:
| Version | Supported |
|---|---|
| 2.x | ✅ Supported |
| < 2.0 | ❌ End of Life |
The DripsLens maintainers take security and data integrity seriously. If you discover a security vulnerability, we appreciate your help in disclosing it responsibly.
Please do not open a public GitHub issue for security vulnerabilities. Instead, email the lead maintainer directly:
- Contact: Hassan Akorede (EDUN)
- Email:
edunhassan1006@gmail.com - Subject Line:
[SECURITY VULNERABILITY] DripsLens: Brief Description
Please provide:
- Description of the vulnerability.
- Steps to reproduce the issue (proof of concept script or request trace).
- The affected component (
app/services,app/routers,app/cache, etc.). - Potential impact and severity assessment.
- Initial Acknowledgement: Within 24 hours.
- Assessment & Triage: Within 48 hours.
- Fix & Deployment: Security fixes will be prioritized, tested, and deployed to production within 7 days.
- Public Disclosure: A public advisory will be published after the patch is deployed and verified.