Please do not report security vulnerabilities through public GitHub issues.
| Version | Supported |
|---|---|
| 0.x (latest release) | ✅ |
| older pre-releases | ❌ |
Security fixes are applied to the latest published release.
Report vulnerabilities privately in one of these ways:
- Open a private security advisory: https://github.com/browserless/bap-py/security/advisories/new
- Email security@browserless.io.
Please include:
- A description of the vulnerability and its impact
- Steps to reproduce or a proof of concept
- Affected version(s) and environment (Python version, OS)
- Suggested remediation, if you have one
- We aim to acknowledge reports within 3 business days.
- We keep you informed while we investigate and fix the issue.
- Once a fix is released, we credit you in the advisory unless you prefer to remain anonymous.
- Please allow us reasonable time to fix the issue before any public disclosure.