We take security issues seriously. We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your contributions.

Please do NOT open a public issue or pull request for security vulnerabilities.

To report a security vulnerability privately, use GitHub private vulnerability reporting (preferred):

• https://github.com/AmineDjeghri/python-package-template/security/advisories/new

You can also reach us directly by email: contact@aminedjeghri.com

When reporting, please include as much of the following as possible:

• A description of the vulnerability and its impact
• The affected component(s) and version(s)
• Steps to reproduce the issue
• Any suggested remediation (if known)

You should receive a response within 48 hours. If you do not, please follow up on the same channel.

Security updates are only provided for the latest released version. Please always use the latest version available.

• You will receive an acknowledgment of your report within 48 hours.
• We will investigate the issue and determine its impact and severity.
• We will fix the issue in a future release and credit you if you wish to be credited.
• We ask that you do not publicly disclose the vulnerability until we have published a fix and given users time to update.

• Keep everything up to date.
• Do not expose admin interfaces directly to the internet without a reverse proxy and proper authentication.
• Use strong, unique passwords and enable multi-factor authentication where available.