Vibrix has not published a stable public release. No version currently receives a formal public security-support guarantee.
Security reports affecting the current default branch or an authorized pre-release build are still welcome and will be assessed by the maintainers.
Do not open a public issue, discussion or pull request for a suspected vulnerability.
Use one of these private channels:
- GitHub's private vulnerability reporting or Security Advisory workflow for this repository, when available.
- The official private contact options published at https://vib.tools/.
Include:
- affected commit, version or build;
- affected platform and environment;
- vulnerability type and impact;
- reproducible steps or a minimal proof of concept;
- required privileges and attack preconditions;
- suggested mitigation, when known;
- whether the issue has been disclosed elsewhere.
Do not include real credentials, personal data or data obtained without authorization.
The maintainers aim to acknowledge a complete report within five business days. The project will validate the report, assess severity, prepare a fix and coordinate a safe disclosure where appropriate. Complex reports may require additional investigation.
Allow the maintainers a reasonable opportunity to investigate and remediate the issue before public disclosure. The final disclosure timeline will be coordinated based on severity, exploitability, affected users and release readiness.
Examples of in-scope issues include unsafe secret handling, path traversal, insecure configuration, arbitrary code execution, privilege escalation and sensitive-data exposure caused by Vibrix.
General support questions, dependency-only reports without a demonstrated Vibrix impact and social-engineering attempts are not vulnerability reports.
Good-faith research that avoids privacy violations, service disruption, data loss and unauthorized access will be handled respectfully. This statement does not grant rights under the current project license or authorize testing against third-party systems.