Skip to content

Repository navigation

Security: nunchuk-io/nunchuk-android

Security

SECURITY.md

Security Policy

Supported Versions

Only the latest release receives security fixes.

Please update to the newest version from Google Play or the latest GitHub release and confirm the issue still exists before reporting.

Reporting a Vulnerability

Please do NOT report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, report them via:

  • GitHub Private Vulnerability Reporting (Security and quality tab → "Report a vulnerability"), or
  • Email: security@nunchuk.io

Please include:

  • Description of the vulnerability and potential impact
  • Steps to reproduce or proof-of-concept
  • Affected versions

You will receive an initial response within 72 hours.

Disclosure Policy

We follow coordinated disclosure. Please allow up to 90 days for a fix before public disclosure. We will credit reporters in release notes unless anonymity is requested.

There aren't any published security advisories