Knish.IO is security infrastructure, and we take reports seriously.
Please do not open a public issue. Report privately through either:
- GitHub: the Security tab of this repository → Report a vulnerability (private vulnerability reporting), or
- Email: team@wishknish.com with "SECURITY" in the subject.
Include the affected version, steps to reproduce, and the impact you expect. A proof of concept helps.
- Acknowledgement within 3 business days.
- An initial assessment within 10 business days.
- Coordinated disclosure: we agree a publication date with you once a fix is available, and credit you unless you prefer otherwise.
| Version | Supported |
|---|---|
| latest minor release | yes |
| older releases | security fixes at our discretion |