Do NOT open a public GitHub issue for security vulnerabilities.
Email: n7for8572@gmail.com
Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Python version, OS, fastvk version
- Proof of concept (if applicable)
| Stage | Time |
|---|---|
| Initial response | 48 hours |
| Investigation | 7 days |
| Fix & coordinated disclosure | 30–90 days |
# ✅
import os
bot = FastVK(token=os.environ["VK_TOKEN"], group_id=int(os.environ["VK_GROUP_ID"]))
# ❌
bot = FastVK(token="vk1.a.hardcoded_token", group_id=123456789)pip install --upgrade fastvkpip install safety bandit
safety check
bandit -r your_bot/| Version | Supported |
|---|---|
| latest | ✅ |
| older | ❌ |
Only the latest release receives security fixes.