If you discover a security vulnerability in the HeyGen CLI, please report it through GitHub Security Advisories. Do not open a public issue.
We will acknowledge your report within 48 hours and aim to provide a fix or mitigation within 7 days.
| Version | Supported |
|---|---|
| Latest stable | Yes |
| Older releases | No |
This policy covers the HeyGen CLI source code and its build/release pipeline. Vulnerabilities in the HeyGen API itself should be reported to security@heygen.com.