Security updates are provided for the latest version available from the main branch.

The security of NetVoyager is taken seriously. If you discover a security vulnerability, please report it responsibly.

• Open a public GitHub issue for security vulnerabilities.
• Disclose vulnerability details publicly before a fix is available.

Please send a detailed report by email to:

stefan-mihai@moga.doctor

Include as much information as possible:

• Description of the vulnerability
• Steps to reproduce
• Affected version(s)
• Proof-of-concept code or screenshots (if applicable)
• Potential impact
• Suggested remediation (optional)

After receiving a report, the maintainer will make a best effort to:

1. Acknowledge receipt of the report within a reasonable timeframe.
2. Investigate and validate the issue.
3. Determine the severity and impact.
4. Develop and test a fix when necessary.
5. Coordinate responsible disclosure.

Examples of security-relevant issues include:

• Remote code execution
• Privilege escalation
• Command injection
• Memory corruption vulnerabilities
• Buffer overflows
• Denial-of-service conditions
• Improper handling of network input
• Sensitive information disclosure

The following are generally considered out of scope unless they lead to a significant security impact:

• Feature requests
• UI/UX issues
• Performance optimizations
• Build configuration warnings
• Issues requiring local administrative access without additional impact

Please provide the project maintainer with a reasonable amount of time to investigate and address reported vulnerabilities before making any public disclosure.

Thank you for helping keep NetVoyager and its users safe.