We actively support the latest release. Please update to the latest version to ensure you have the latest security patches.
| Version | Supported |
|---|---|
| 0.4.x | ✅ Yes |
| < 0.4.0 | ❌ No |
If you discover a security vulnerability within Gitlytics, please report it privately to avoid exposing users to risk before a fix is available.
Do not open a public GitHub issue for security vulnerabilities.
Please report vulnerabilities privately using GitHub's built-in Private Vulnerability Reporting feature. You can find this by navigating to the "Security" tab of this repository on GitHub and selecting "Advisories" -> "Report a vulnerability".
Please include the following details in your report:
- Affected Component: CLI/Python library, frontend dashboard, or backend.
- Detailed Description: A clear description of the vulnerability and its potential impact.
- Steps to Reproduce: Step-by-step instructions or proof-of-concept (PoC) code to reproduce the issue.
- Acknowledgment: We aim to acknowledge receipt of your report within 72 hours.
- Investigation: We will investigate the issue and determine the severity and impact.
- Fix & Release: If confirmed, we will work on a patch and release it in a new version as soon as possible.