Report vulnerabilities through GitHub private vulnerability reporting. Do not open public issues for security reports.
Kubex reviews reports on a best-effort basis. There is no SLA, no support contract, and no promise to backport fixes to older releases.
Please include:
- Affected version or commit.
- Reproduction steps.
- Expected impact.
- Any known workaround.