Security updates are provided for the latest main branch and recent stable tags.
Please do not report security vulnerabilities through public GitHub issues.
Use one of the following private channels:
- GitHub Security Advisories: https://github.com/deveshjhaq/nirman-baas/security/advisories/new
- Maintainer contact: deveshjhaq@gmail.com
Please include:
- Vulnerability description
- Affected service(s)
- Reproduction steps or proof of concept
- Potential impact
- Suggested mitigation (if available)
- Initial acknowledgement: within 72 hours
- Triage and impact review
- Fix and coordinated disclosure timeline
We follow responsible disclosure and request that vulnerabilities are kept private until a fix is available.