mirror of
https://github.com/doocs/md.git
synced 2026-08-29 07:31:03 +08:00
Libin YANG
8a20da94a5
Bump direct and transitive deps to latest versions while keeping Prettier pinned at 2.8.8. Force shell-quote to 1.8.4 to resolve CVE-2026-9277 and add SECURITY.md. Co-authored-by: Cursor <cursoragent@cursor.com>
1.1 KiB
1.1 KiB
Security Policy
Supported Versions
| Version | Supported |
|---|---|
| 2.x | ✅ |
| < 2.0 | ❌ |
Reporting a Vulnerability
If you discover a security vulnerability in doocs/md, please report it responsibly:
- Do not open a public GitHub issue for security-sensitive reports.
- Email the maintainers at security@doocs.org, or use GitHub Private Vulnerability Reporting if available.
- Include a clear description, steps to reproduce, and impact assessment when possible.
We aim to acknowledge reports within 3 business days and will work with you on a fix and coordinated disclosure timeline.
Security Updates
- Dependency updates and security fixes are tracked via Dependabot alerts.
- Published advisories appear on the Security tab.
Thank you for helping keep doocs/md and its users safe.