The security, integrity, and resilience of the GLASTOR® Core ecosystem is an absolute priority. We appreciate the efforts of the security research community and independent developers in discovering and responsibly reporting vulnerabilities.

We actively maintain security patches for the following releases and branches:

⚠️ IMPORTANT: DO NOT open public GitHub Issues or public pull requests for security vulnerabilities that could compromise production systems or reveal leaked credentials.

Please report vulnerabilities using GitHub's native confidential reporting tool:

1. Navigate to the Security tab of the affected repository (e.g. glastor-core/glastor-core/security).
2. Click Report a vulnerability.
3. Fill out the advisory form with technical details, impact assessment, and a reproducible proof-of-concept (PoC).

If Private Vulnerability Reporting is unavailable:

• Security Contact: ventas@glastor.es
• Subject: [SECURITY-ALERT] GLASTOR Core - Vulnerability Report

• Initial Response & Acknowledgment: Within 24 to 48 business hours.
• Triage & CVSS Assessment: Within 5 business days.
• Coordinated Disclosure: We adhere to a 90-day grace period to allow patch deployment before public CVE disclosure.

_{© 2026 GLASTOR® Core. All rights reserved.}