ZoneBridge follows semantic versioning.
Security updates are provided for supported releases.
| Version | Supported |
|---|---|
| Unreleased | Yes |
Support for additional releases will be documented as the project matures.
If you discover a security vulnerability, please do not create a public GitHub issue.
Instead, report the issue privately to the project maintainers.
Please include:
- A description of the vulnerability
- Steps required to reproduce it
- The potential impact
- Any suggested remediation (if available)
Every report will be reviewed responsibly and acknowledged as quickly as possible.
Please allow maintainers reasonable time to investigate and resolve reported vulnerabilities before publicly disclosing them.
Responsible disclosure helps protect the community while fixes are developed and released.
Security considerations include, but are not limited to:
- Authentication
- Authorization
- Session management
- API security
- Dependency vulnerabilities
- Sensitive data exposure
- Infrastructure configuration
ZoneBridge follows a security-by-design approach.
Security is considered throughout the software development lifecycle rather than being treated as a final implementation step.
New features should be designed with secure defaults, principle of least privilege, and defense in depth whenever practical.