AegisMind is currently under active development. Security fixes are generally applied to the latest version on the main branch.

Please do not open a public GitHub issue for security vulnerabilities.

Instead, report security issues privately by contacting:

amansharma42211@gmail.com

Please include:

• A description of the vulnerability
• Steps to reproduce the issue
• The affected component or version
• Any relevant logs, screenshots, or proof of concept
• The potential impact, if known

You can encrypt sensitive information if necessary.

Security reports will be reviewed as soon as reasonably possible.

If the issue is confirmed, appropriate steps will be taken to address it and release a fix when practical. Reports that do not represent a security vulnerability may be closed with an explanation.

Please allow reasonable time for investigation and remediation before publicly disclosing a vulnerability.

Security reports are especially relevant to:

• Authentication and authorization
• API and service boundaries
• Data exposure
• Credential or secret handling
• Remote code execution
• Injection vulnerabilities
• AI service and inference infrastructure
• Container and deployment security

Thank you for helping keep AegisMind and its users secure.