Skip to content

Security: Figsh/xfscss

Security

SECURITY.md

Security Policy

Supported Versions

The following versions of fscss are currently receiving security updates:

Version Supported
1.2.x ✅
1.1.x ✅
< 1.1 ❌

Only the latest two minor releases are actively patched. Older versions should upgrade to receive fixes.

Reporting a Vulnerability

If you discover a security vulnerability in fscss, please do not open a public GitHub issue. Instead, report it privately:

When reporting, please include:

  • A description of the vulnerability and its potential impact
  • Steps to reproduce (a minimal repro is very helpful)
  • Which version(s) of fscss are affected

What to expect:

  • Acknowledgement of your report
  • A status update as we investigate (accepted, needs more info, or declined)
  • If accepted, a fix will be prioritized and a patched release issued; you'll be credited in the release notes unless you prefer to stay anonymous
  • If declined, we'll explain why (e.g. not a security issue, expected behavior, or already known/fixed)

Please allow a reasonable disclosure window before publicly sharing details, so users have time to update.

There aren't any published security advisories