| Version | Supported |
|---|---|
| latest | ✅ |
If you discover a security vulnerability in this project, please report it responsibly.
Do not open a public issue.
Instead, use one of the following methods:
-
GitHub Security Advisories: Open a private security advisory at https://github.com/rekurt/gost-crypto/security/advisories/new
-
Email: Send details to the repository maintainer (see profile).
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
- Acknowledgement: within 3 business days
- Initial assessment: within 7 business days
- Fix release: depends on severity, typically within 30 days
We follow coordinated disclosure. Please allow time for a fix before public disclosure.
For detailed threat model, security assumptions, and known limitations, see docs/THREAT_MODEL.md.