| Version | Supported |
|---|---|
| 1.0.x | Yes |
If you discover a security vulnerability in SPAN Finder, please report it responsibly:
- Do NOT open a public GitHub issue for security vulnerabilities
- Report via GitHub Security Advisories
- Include a detailed description of the vulnerability and steps to reproduce
We will acknowledge your report within 48 hours and work to release a fix as soon as possible.
The following are in scope:
- Local privilege escalation
- Arbitrary code execution through file operations
- Credential leakage (FTP/SFTP stored credentials)
- Path traversal vulnerabilities
The following are out of scope:
- Issues requiring physical access to the machine
- Denial of service on the local application
- Issues in third-party dependencies (report to the upstream project)