The latest 0.x minor release receives security fixes.
Email security@verifycate.com with:
- the affected version or commit,
- a description of the issue and its impact,
- reproduction steps or a proof of concept,
- any suggested fix.
Please do not open a public GitHub issue or disclose the issue publicly until we have confirmed a fix and a release date. We aim to acknowledge reports within two business days.
This repository contains the client SDK only. The hosted Verifycate service and its infrastructure are out of scope for this repository; report service issues through the same address.