NodeZero Social currently supports the latest main branch and active staging deployments.
Please do not disclose vulnerabilities in public issues, pull requests, or discussions.
Report vulnerabilities privately to:
Include the following details when possible:
- Affected component and version/commit
- Reproduction steps or proof of concept
- Impact assessment
- Suggested remediation (optional)
- Initial acknowledgment within 3 business days
- Triage and severity assessment as quickly as possible
- Coordinated disclosure after a fix or mitigation is available
This policy applies to all repository packages, deployment scripts, and infrastructure definitions in this monorepo.