Skip to content

Security: rgcsekaraa/metabeam

Security

SECURITY.md

Security Policy

Reporting a vulnerability

metabeam parses untrusted files, so memory-safety and denial-of-service issues are taken seriously. If you find a vulnerability, please report it privately rather than opening a public issue.

Use GitHub's private vulnerability reporting (the "Report a vulnerability" button under the Security tab) or email the maintainers. We aim to acknowledge reports within a few days and to ship a fix promptly once confirmed.

Please include:

  • The file type and a minimal sample that triggers the issue, if possible
  • The observed behavior (crash, hang, excessive memory use)
  • The metabeam version (metabeam --version)

Scope

The core parsing library is the primary concern. A malformed input file should never cause a panic, an infinite loop, or unbounded memory growth. Reports of any such behavior are in scope.

There aren't any published security advisories