As from irisnk.me/.well-known/security.txt:
Contact: [irisnk@elrant.team](mailto:irisnk@elrant.team)
Encryption: [PGP Key](https://keys.openpgp.org/vks/v1/by-fingerprint/29AAE731164AFE97A2E8ECA83FB89E8ADB3D4BFC)
Expires: 2038-01-01T00:00:00Z
Preferred-Languages: en, it, nl
The following table outlines which versions of the project receive security updates:
| Version | Supported |
|---|---|
| 2.x.x / main | ✅ |
| 1.x.x / old | ❌ |
To report a security vulnerability, please follow these steps:
- Contact me via email at irisnk@elrant.team using encrypted (PGP) and signed (S/MIME) communication when possible.
- Use the provided PGP Key to encrypt sensitive information.
- Provide a detailed description of the vulnerability, including steps to reproduce it and any relevant logs or evidence.
- You can expect an initial response within 72 hours (or, well, whenever I'm free... or find someone to help me...) and updates on the investigation status as it progresses.
- If the vulnerability is confirmed, I will coordinate a resolution and disclosure timeline with you.
Thank you for helping keep this weird silly website secure!