Security policy

Supported versions

Security fixes are provided for the latest published CriProx release.

Reporting a vulnerability

Please use GitHub private vulnerability reporting. Do not open a public issue for a suspected vulnerability and do not include secrets, private project files, or copyrighted card artwork in a report.

Include the affected version and operating system, reproduction steps, potential impact, and any suggested mitigation. You should receive an acknowledgement through the security advisory after the report has been reviewed.