Only the latest release branch of grimmory-proxy actively receives security updates and bug fixes.
| Version | Supported |
|---|---|
| 1.12.x | ✅ |
| < 1.12 | ❌ |
We take the security of grimmory-proxy seriously. If you discover a security vulnerability, please report it privately rather than creating a public issue or discussion.
GitHub Private Vulnerability Reporting is enabled for this repository.
To submit a report:
- Navigate to the Security Advisories tab of this repository.
- Click Report a vulnerability to open a private draft advisory.
- Provide a detailed summary of the vulnerability, including:
- A clear description of the issue.
- Exact steps or proof-of-concept (PoC) to reproduce the behavior.
- Affected endpoints, configuration options, or deployment scenarios.
- Potential impact or severity assessment.
- Acknowledgment: You will receive an initial response acknowledging your report within 48 hours.
- Assessment: We will evaluate and verify the report in a private advisory fork.
- Resolution: If confirmed, a security patch will be prepared, tested, and published alongside a coordinated security release and advisory notice.
Please adhere to responsible disclosure guidelines and refrain from disclosing details publicly until a fix has been released.