We currently provide security updates for the latest version of dtrust on the main branch.
| Version | Supported |
|---|---|
| main | ✅ Yes |
| older | ❌ No |
If you discover a security vulnerability, please do not open a public issue.
Instead, report it responsibly by emailing:
Please include:
- A detailed description of the issue
- Steps to reproduce (if possible)
- Any potential impact you foresee
We’ll confirm receipt of your report within 48 hours and aim to provide a fix or mitigation plan within 7 days.
- Do not publicly disclose details until we release a fix.
- We appreciate coordinated disclosure to keep users safe.
- Security researchers who report responsibly will be credited in release notes (unless they prefer to remain anonymous).
We value the contributions of the security community and take reports seriously.
Your efforts help make dtrust safer for everyone.