Security fixes are released in the latest version of Voidstrap only. Update to the latest release before reporting a problem.
| Version | Supported |
|---|---|
| Latest release | Yes |
| Older releases | No |
Do not report security problems in public issues, pull requests or Discord channels. Report them privately in whichever way you prefer:
- GitHub: report a vulnerability from the repository's Security tab.
- Discord: send a direct message to a Voidstrap staff member on the Discord server.
Include as much of this as you can:
- which app and version is affected (Windows or Android)
- what the problem is and what an attacker could do with it
- steps to reproduce it, or a proof of concept
You will get a reply once the report has been reviewed, and updates while a fix is worked on. Keep the details private until a fixed version is released. If you would like to be credited, say so in your report.
This policy covers the Voidstrap Windows and Android apps and the files published in this repository's releases.
Problems in Roblox itself belong to Roblox, so report them through the Roblox bug bounty program. Problems in a third party library belong to that project, but let us know too if Voidstrap is affected.