Skip to content

Security: SavinRazvan/hydra-logger

Security

SECURITY.md

Security Policy

Supported Versions

Hydra-Logger follows the latest patch-only support model for security updates.

Version Supported
0.7.x
< 0.7.0

Reporting a Vulnerability

Please do not open public GitHub issues for suspected vulnerabilities.

Use one of these private channels:

  1. Preferred: GitHub Security Advisory private reporting for this repository.
  2. Fallback: email razvan.i.savin@gmail.com with the subject line hydra-logger security report.

Include as much detail as possible:

  • affected version(s)
  • impact and attack scenario
  • reproduction steps or proof-of-concept
  • suggested fix (if available)

Response Expectations

  • Initial acknowledgment target: within 72 hours
  • Status updates target: at least every 7 days until resolution
  • Resolution target: fix or mitigation in the next available patch release, based on severity

After remediation, a release note entry and/or advisory will document impact, fixed versions, and upgrade guidance.

There aren't any published security advisories