Security Policy

Supported Versions

Version	Supported
1.x.x	✅

Reporting a Vulnerability

We take security vulnerabilities seriously. If you discover a security vulnerability within Toston, please send an email to [email protected]. All security vulnerabilities will be promptly addressed.

Please do not report security vulnerabilities through public GitHub issues.

What to include in your report

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes

Response timeline

• We will acknowledge receipt within 72 hours
• We will provide a detailed response within 10 business days
• We will keep you updated on our progress

Thank you for helping keep Toston secure!