Please do NOT report security vulnerabilities through public GitHub issues.
Instead, please report them via email to security@modulex.dev.
Include the following information in your report:
- Description of the vulnerability
- Steps to reproduce (proof of concept if possible)
- Affected versions
- Any potential impact
- Acknowledgment: Within 48 hours of your report
- Initial assessment: Within 5 business days
- Fix and disclosure: We aim to resolve confirmed vulnerabilities within 30 days
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
This policy applies to the modulex npm package. For vulnerabilities in the ModuleX platform itself, please contact security@modulex.dev.