| Version | Supported |
|---|---|
| the latest release | ✅ fixes ship as the next patch or minor |
| older | ❌ upgrade to the latest release first |
Please do not report security vulnerabilities via public GitHub Issues.
Report it privately through GitHub, by opening a draft security advisory, or send an email to shalaevad.alexey@gmail.com. Either way, include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact and affected versions
We aim to acknowledge reports within 48 hours and provide a fix within 7 days for critical issues.
Once the fix is released, we will credit you in the release notes unless you prefer to remain anonymous.
mattermind never writes tokens or API keys to disk or logs. In --verbose mode,
tokens are masked (mm_to***). If you find a case where secrets leak, please
report it immediately.