We actively monitor and patch security vulnerabilities. The table below details which versions of JPersist currently receive security updates:

Please do not open public GitHub issues for security vulnerabilities.

If you discover a security vulnerability within JPersist, we ask that you report it responsibly using one of the following methods:

1. GitHub Private Vulnerability Reporting (Preferred): Go to the Security tab of this repository, click on Vulnerability reporting, and select Report a vulnerability. This keeps the disclosure private until a patch is ready.
2. Direct Email: Alternatively, you can contact the maintainers directly at yannickebongue@gmail.com.

• Acknowledgement: We will acknowledge receipt of your vulnerability report within 48 hours.
• Triage & Fix: We will collaborate with you to understand and reproduce the issue, and prepare a fix for the current active release line.
• Disclosure: Once a patch is released (e.g., in a v1.6.x patch release), we will publish a Security Advisory to notify the community.