Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in xbook, please report it responsibly.

GitHub: Open a security advisory

Please include:

Description of the vulnerability
Steps to reproduce
Impact assessment
Suggested fix (if any)

We will acknowledge receipt within 48 hours and aim to release a fix within 7 days for critical issues.

Supported Versions

Version	Supported
0.1.x	Yes

Scope

xbook application code (this repository)
API endpoints
Authentication flows
Data storage and encryption

Out of Scope

X (Twitter) API vulnerabilities
Third-party dependencies (report to the upstream project)
Social engineering attacks

There aren’t any published security advisories