Skip to content

Security: deadlightreal/byte-lang

Security

SECURITY.md

Security Policy

Supported Versions

This section outlines the versions of Byte-Lang Compiler that receive security updates. We aim to prioritize the latest stable versions to ensure optimal performance, security, and stability.

Version Supported
1.0.0

Only versions marked as supported will receive security patches and updates. Users are encouraged to upgrade to the latest version as soon as possible to benefit from security improvements.

Reporting a Vulnerability

At Byte-Lang, we take security seriously. If you discover a vulnerability, please follow the reporting process outlined below:

How to Report

  • Send an email to richardfabianmain@gmail.com with details of the vulnerability.
  • Include any relevant information, including:
  • A detailed description of the issue.
  • Steps to reproduce the vulnerability.
  • Potential impact and risks.
  • Any suggested mitigations or patches (if available).

Please avoid sharing the vulnerability publicly until we have resolved the issue and released a patch.

Response Timeline

After reporting, you can expect:

  • Acknowledgment of receipt: Within 48 hours.
  • Initial assessment: Within 5 business days, we will inform you whether the vulnerability is valid and whether it can be reproduced.
  • Updates on progress: Bi-weekly updates will be provided until the issue is resolved or declined.
  • Resolution: Once confirmed, we will aim to release a fix within 30 days. If the issue is critical, we may expedite the process.

Our Commitment

  • We will work with you to mitigate the issue and credit the discovery to you (unless you prefer anonymity).
  • If your reported vulnerability does not qualify, we will provide a detailed explanation.
  • In cases of significant impact, we may issue a coordinated disclosure alongside the release of a security patch.

Thank you for helping us keep Byte-Lang secure for all users!

There aren’t any published security advisories