We will fix reported vulnerabilities in the last patch version of:

• 3.x.patch
• 4.x.patch

where x is the last published version.

In older versions we might not be able to fix vulnerabilities from depedencies, in this situation we recommend our users to update to the latests versions.

To report a possible vulnerability or security issue you can:

• Send us an email to security@wazuh.com
• open a new security report under the security tab on this repository

PLEASE DO NOT OPEN A PUBLIC ISSUE ABOUT SECURITY

We want to protect our community, so please give us time to fix a vulnerability before publishing it.