APIDocumer is an evolving project. Security fixes are applied to the latest main branch first.
Please do not open public issues for suspected security vulnerabilities.
Instead:
- Email maintainers with details (impact, reproduction, proof-of-concept).
- Include affected version/commit and environment details.
- Allow time for triage and coordinated disclosure.
If no private contact channel is available, open a minimal issue requesting a private reporting channel without disclosing exploit details.
- Vulnerability type and impact
- Reproduction steps
- Affected files/endpoints/components
- Suggested remediation (if available)
After a fix is available, maintainers may publish a security advisory and release notes.