Yuva is in beta. It has not had an independent security audit.
Until 1.0, only the latest 0.1.x release gets security fixes. Upgrade to it before reporting, and expect fixes to ship as a new 0.1.x release rather than as patches to older ones.
| Version | Supported |
|---|---|
| latest 0.1.x | yes |
| older 0.1.x, and 0.0.x | no |
unreleased main |
best effort |
Report a vulnerability privately through GitHub's private vulnerability reporting: Security → Report a vulnerability on https://github.com/productdevbook/yuva (https://github.com/productdevbook/yuva/security/advisories/new), or by e-mail to security@useyuva.com. Do not open a public issue for it.
Include the affected version or commit, the steps to reproduce and the impact you see. You will get an answer within 7 days. Fixes are released before the report is made public, and reporters are credited unless they ask not to be.