Skip to content

Security: paolostivanin/OTPClient

SECURITY.md

Security Policy

Supported Versions

The following list describes whether a version is eligible or not for security updates.

Version Supported EOL
3.6.x -
3.5.x 31-Mar-2024
3.4.1 31-May-2024
3.4.0 29-Feb-2024
3.3.x 29-Feb-2024
3.2.x 31-Jan-2024
3.1.x 30-Nov-2023
3.0.x 31-Dec-2022
2.6.x 15-Jan-2023
2.5.x 31-Aug-2022
2.4.x 15-May-2022
2.3.x 28-Feb-2021
2.2.x 27-May-2020
2.1.x 20-Apr-2020
2.0.x 08-Mar-2020
1.5.x 31-Mar-2020
< 1.5.0 27-Jun-2019

Reporting a Vulnerability

In case you should find a vulnerability, please report it privately to me via e-mail. The following is the workflow:

  • security issue is found, an e-mail is sent to me
  • within 24 hours I will reply to your e-mail with some info like, for example, whether it actually is a security issue and how serious it is
  • within 7 days I will develop and ship a fix
  • once the update is out I will open a security advisory

There aren’t any published security advisories