The latest released version receives security fixes. Older versions are not actively patched.
Please do not open a public GitHub issue for security vulnerabilities.
Use GitHub's private vulnerability reporting: https://github.com/mregni/BoardGameTracker/security/advisories/new
You will receive a response within 72 hours. A disclosure timeline will be agreed — typically 90 days — before any public disclosure.
- Acknowledgement within 72 hours
- Status update within 7 days
- Credit in release notes if desired