Repository navigation

Security

Report a vulnerability

SECURITY.md

Security policy

Supported versions

Only the latest release is supported: fixes go to main and ship in the next release.

Reporting a vulnerability

Don't open a public issue. Report privately through GitHub security advisories.

Include:

what is affected: the proxy, the API, the admin UI or the image;
the version or the image tag;
steps to reproduce and the impact.

You'll get a reply within 7 days. Once a fix is released, the advisory is published with credit to you, unless you ask otherwise.

There aren't any published security advisories