Files
liquidjs/SECURITY.md
4775227358 docs(security): route vulnerability reports to GitHub Advisories (#913)
Replace the private email contact with GitHub Security Advisories and
set the common-case fix expectation to within a month.

Co-authored-by: Cursor <[email protected]>
2026-06-20 00:00:05 +08:00

825 B

Security Policy

Supported Versions

Only the latest major version is supported with security updates. It can be changed if many people are relying on a specific version for some reason. If this is the case, welcome to file an issue.

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

Report them via GitHub Security Advisories — Report a vulnerability.

  • If the vulnerability in question affects common use cases, it will be treated as a bug and fixed very soon (typically within a month).
  • Otherwise, it'll be scheduled in the same priority of feature request (which is lower than bugs).
  • If the request is declined, you'll receive a reply anyway (most likely there will be a discussion).