Security fixes are released for the latest version of the client published in GitHub Releases. Please upgrade to the latest version before reporting an issue.
| Version | Supported |
|---|---|
| 4.2.x | ✅ |
| < 4.2 | ❌ |
Please do not open a public GitHub issue for security vulnerabilities.
Report them privately by one of these methods:
- GitHub private vulnerability reporting
- Email integrations@elasticemail.com with the subject
Security: elasticemail-bash
Please include:
- A description of the issue and its impact
- Steps to reproduce, or a proof of concept
- The affected SDK version(s)
We will acknowledge your report, investigate, and keep you updated on the fix. Please give us reasonable time to release a fix before disclosing the issue publicly.
If you think an API key has been exposed (in a commit, log, issue, screenshot or shell history), revoke it right away in your Elastic Email API settings and create a new one.