The following versions of DMGN are currently supported with security updates:
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
| < 0.1.0 | ❌ |
If you discover a security vulnerability, please report it responsibly.
- Open a public GitHub issue
- Discuss the vulnerability publicly
- Include sensitive data in bug reports
- Email: Send details to the maintainers privately
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Any suggested fixes (optional)
- Wait: for acknowledgment before public disclosure
| Timeline | Action |
|---|---|
| 24 hours | Acknowledgment of report |
| 7 days | Initial assessment and status |
| 30 days | Fix or mitigation plan |
| 90 days | Public disclosure (if applicable) |
- Key derivation: Argon2id (memory-hard)
- Identity encryption: XChaCha20-Poly1305
- Memory encryption: AES-GCM-256 with per-memory keys
- Key hierarchy: Master key → per-memory keys
- Passphrase strength: Minimum 8 characters recommended
- Data directory permissions: Ensure proper file permissions
- Network exposure: Restrict API access in production
- Backup security: Encrypted backups are safe to store
Subscribe to the repository to receive security advisories:
# Watch releases only
git fetch origin && git log --oneline --all | head -20Thank you for helping keep DMGN secure!