If you discover a security vulnerability in Verani, please follow these steps:
-
Do not disclose it publicly until our team has addressed the issue.
-
Email the details to hey@v0id.me. Please include:
- A clear description of the vulnerability
- Steps to reproduce the issue
- The potential impact
- Suggested mitigations (if any)
- Any other relevant information
-
We will acknowledge your report within 72 hours.
-
If the issue is confirmed, we will prioritize releasing a patch as quickly as possible.
- Once a fix is released, we will disclose the issue publicly.
- If a fix is not available within 90 days of your report, we will disclose the issue publicly at that time.
We only provide security updates for the latest release of Verani. Older versions are not supported.