Security updates are provided for the following versions of doom-cli:
| Version | Supported |
|---|---|
| Latest | Yes |
| < 1.0 | No |
If you discover a security vulnerability in doom-cli, report it privately using the following steps:
- Do not report security vulnerabilities through public GitHub issues or discussions.
- Submit a report using GitHub Private Vulnerability Reporting on this repository.
- If private vulnerability reporting is unavailable, contact the maintainer directly.
Include the following details to help triage and resolve the issue:
- A clear description of the vulnerability and affected subsystem.
- Numbered steps or a minimal CLI command sequence to reproduce the issue.
- An impact assessment (such as unintended file deletion, path traversal, or arbitrary code execution).
- Any suggested fixes or mitigations.
- Receipt of a vulnerability report is acknowledged within 48 hours.
- A status update and estimated fix timeline are provided within 7 days.
- Once a fix is verified, a patch release and security advisory are published.