| Version | Supported |
|---|---|
| 0.1.x | ✅ Active development |
We take the security of CodeVista seriously. If you discover a security vulnerability, please follow these steps:
-
Do not disclose publicly. Please report vulnerabilities privately via GitHub Security Advisories at: https://github.com/Luv-Goel/CodeVista/security/advisories/new
-
Include details. Provide a clear description of the issue, steps to reproduce, and the potential impact.
-
Allow time. We aim to acknowledge receipt within 48 hours and publish a fix within 14 days for validated issues.
The following items are in scope for security reports:
- The web application (React/TypeScript frontend)
- API services and data handling
- Authentication and authorization logic
- Third-party dependency vulnerabilities
- Theoretical attacks without a practical exploit path
- Social engineering of the development team
- Issues in dependencies that are already patched in newer versions
We believe in coordinated disclosure. We will:
- Acknowledge your report within 48 hours
- Provide regular updates on remediation progress
- Credit you in release notes (if desired)
- Not pursue legal action for good-faith research
Thank you for helping keep CodeVista and its users safe.