We currently support security updates for the following versions of Dino:
| Version | Supported |
|---|---|
| v0.1.x | ✅ |
| < v0.1 | ❌ |
Do not open a public GitHub issue for security vulnerabilities.
If you discover a security hole, please report it privately to ensure the safety of all Dino users.
- Email: Send your report to security@structx.io.
- Include: A brief description, steps to reproduce (PoC), and the potential impact.
- Acknowledgement: You will receive a response within 48 hours.
- Evaluation: We will verify the vulnerability and determine its severity.
- Fix: If valid, we will prepare a patch.
- Disclosure: We will release a new Docker image/binary and credit you for the discovery.
Note: This policy is subject to change as the project matures.