We provide security updates for the latest released version. For older versions, please upgrade to the current release.
If you discover a security vulnerability, please email security@faf.one directly.
Please do not open a public GitHub issue for security reports. Responsible disclosure gives us time to fix the issue before it's widely known.
When reporting, please include:
- A description of the vulnerability
- Steps to reproduce
- Affected versions (if known)
- Any suggested fix (optional)
We aim to respond within 7 days.