The following versions of our project currently receive security updates:

Please do not open a public GitHub issue for security vulnerabilities.

Instead, report vulnerabilities securely using one of the following methods:

1. GitHub Private Vulnerability Reporting: If enabled on this repository, navigate to the Security tab, click on Advisories, and select Report a vulnerability to submit a structured, private draft.
2. Email: Send a detailed report to admin@simtools-app.com. If possible, encrypt your email using our PGP key: FB1959A27B06559454D5429E56C13BF275286349.

To help us triage and resolve the issue quickly, please include:

• Description: A brief summary of the vulnerability type (e.g., SQL Injection, Remote Code Execution).
• Impact: The potential risk or damage this vulnerability poses.
• Affected Components: Specific files, API endpoints, or functions involved.
• Steps to Reproduce: Clear, step-by-step instructions or a minimal Proof of Concept (PoC) script.
• Remediation: Any suggested fixes or workarounds, if known.

• Acknowledgement: We will acknowledge receipt of your report within 48 hours.
• Triage & Investigation: Our security team will validate the issue and determine its impact.
• Fix & Release: We aim to patch accepted vulnerabilities within 30 to 90 days.
• Disclosure: A public Security Advisory will be published once the patch is live, and we will credit you for the discovery (unless you request anonymity).