This section lists the versions of Preserve currently supported with security updates:
Version | Supported |
---|---|
1.0.x | ✅ |
< 1.0 | ❌ |
We take the security of Preserve seriously. Although this is a local tool, we encourage responsible disclosure of any issues that may affect the safety or privacy of its users.
- Do not publicly disclose the issue
- Email the project maintainer with as much detail as possible:
- Reproduction steps
- System details
- Potential impact
- Allow up to 48 hours for an initial response
- Coordinate disclosure – We aim to patch issues quickly and responsibly, and will work with you to manage coordinated disclosure if needed.
Since Preserve is primarily a local filesystem tool, please consider the following when using or contributing to the project:
- Be cautious when processing untrusted paths that may point to critical system files
- Avoid running the script with elevated privileges unnecessarily
- Ensure files written or copied maintain appropriate user/group permissions
- If logging is enabled, verify logs do not capture sensitive paths or data
- Keep
pywin32
and other dependencies updated - Audit the contents of
requirements.txt
regularly for CVEs
- Keep your system and Python environment up to date
- Avoid running the tool with administrative or sudo privileges unless absolutely necessary
- Use
virtualenv
orvenv
to isolate your environment - Review code and dependencies before running in sensitive environments
- Report any questionable behavior or access patterns you observe
Thank you for helping ensure Preserve remains a secure and dependable tool!