Preferred-Languages: en

security@availproject.org

Preferred languages for communication: English (en)

For reporting security vulnerabilities, please contact: security@availproject.org

If you discover any vulnerabilities in Avail Technology, please follow these steps to report them:

1. Contact Us Privately: Reach out using one of the private contact addresses.

2. Describe the Vulnerability: Provide a detailed description of the vulnerability. Include steps to reproduce it if possible. If you have a fix, please link it in your message.

3. Wait for Evaluation: Our team will evaluate the vulnerability and determine the appropriate course of action. We will keep you informed and credit you in any public report if you wish. Please avoid public disclosure of the vulnerability until we release a fix or provide specific guidance.

We recognize the importance of security and strive to address all reported vulnerabilities in a timely and responsible manner. We encourage responsible reporting and appreciate your assistance in identifying and mitigating potential threats to our technology.

Please note that some vulnerabilities might be out-of-scope for our security policy. Examples might include vulnerabilities in dependencies that are not directly part of our codebase. We recommend consulting our guidelines or contacting us directly for clarification on what is considered in-scope.

Thank you for helping to keep Avail Technology and its users safe!