We support the latest published MeMesh release. Older releases should be assumed unsupported unless a maintainer says otherwise.
| Version | Supported |
|---|---|
| Latest published release | Yes |
| Older releases | No |
Do not post vulnerability details in public GitHub issues.
GitHub private vulnerability reporting is not currently enabled for this repository. Use an existing private maintainer contact, or open an issue asking a maintainer how to report privately. Include no vulnerability details in that public request; wait for a private contact before sharing them.
- A clear description of the issue
- Steps to reproduce
- Impact assessment
- A proposed fix, if you have one
- Contact details for follow-up
- Acknowledgment: within 48 hours
- Initial assessment: within 5 business days
- Resolution targets:
- Critical: 24-48 hours
- High: 3-7 days
- Medium: 7-14 days
- Low: next scheduled release
These are targets, not guarantees, but we use them to drive triage and communication.
Please give us reasonable time to investigate and ship a fix before public disclosure. We will coordinate disclosure timing with reporters when possible and credit valid reports unless you prefer to stay anonymous.