Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
18.0.x	✅
17.0.x	✅
< 17.0	❌

Reporting a Vulnerability

Please do not open a public issue for security vulnerabilities.

Email: paul@digifirst.com

Include:

Module name and version
Description of the vulnerability
Steps to reproduce
Potential impact

We respond within 48 hours.

M-Pesa Credentials

Never commit real Daraja credentials. Always use .env file. Rotate credentials immediately if exposed.

There aren't any published security advisories