Only the latest released version receives security updates.
Please do not open public GitHub issues for security vulnerabilities.
Preferred channel: GitHub Private Vulnerability Reporting. Go to the Security tab of this repository and click "Report a vulnerability".
If you cannot use GitHub, email security@mage-os.org.
Please include:
- Affected module version and Magento or Mage-OS version
- Reproduction steps or proof-of-concept
- Expected impact
We aim to acknowledge reports within 7 days. Once a fix is available, we will coordinate a disclosure timeline with you.