Skip to content

Security: SymPress/profiler

Security

SECURITY.md

Security Policy

Supported Versions

Security fixes are provided for the latest released version of this package.

Reporting a Vulnerability

Please do not open public issues for suspected security vulnerabilities.

Report vulnerabilities by emailing brian.schaeffner@sympress.de with:

  • A description of the issue and its impact
  • Steps to reproduce or a minimal proof of concept
  • Affected versions or commits, if known
  • Any relevant logs, screenshots, or profiler output with secrets removed

You should receive an acknowledgement within 72 hours. Confirmed vulnerabilities will be handled with coordinated disclosure.

Sensitive Data

Profiler output may contain request metadata, headers, query parameters, user information, and runtime diagnostics. Do not enable profiler access on public production environments unless access is explicitly restricted.

There aren't any published security advisories