The MailKit team takes the security of our software products and services seriously.
If you believe you have found a security vulnerability in the MailKit repository, please report it to us as described below.
Due to the fact that the MailKit team is small (currently only myself), I can only support security fixes for the latest version.
| Version | Supported |
|---|---|
| 4.x | ✅ |
| < 4.0 | ❌ |
Please do not report security vulnerabilities through public GitHub issues.
Instead, please report them via a Private Security Advisory submission.
For more information about the fields available and guidance on filling in the form, see "Creating a repository security advisory" and "Best practices for writing repository security advisories."
You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message.
All communications should be in English.