Do not open public GitHub issues for security vulnerabilities across EthanShen10086 projects.
Report privately via GitHub Private Vulnerability Reporting on the affected product repository:
- Open the repository on GitHub
- Go to Security → Report a vulnerability
Each maintained repository should enable private vulnerability reporting under Settings → Security.
| Stage | Target |
|---|---|
| Acknowledgment | 72 hours |
| Initial triage | 7 days |
| Fix or mitigation plan | 30 days (severity-dependent) |
MsgGuard, voxera-kit, voxera, finera, pulsera, ScrollCap, ciphera, ciphera-vps, and other repos linking to this policy.