This policy covers every repository in the Laravolt organization that has no SECURITY.md of its own.
Security fixes are released for the latest version of each project. Please check that the problem still happens on the latest release before reporting.
Please do not report security problems in public issues, discussions or pull requests.
Report them privately, in one of two ways:
- GitHub: open the affected repository's Security tab and choose Report a vulnerability.
- Email: q@laravolt.dev
Include the affected project and version, the steps to reproduce, and what an attacker could do with it. We will confirm that we received the report and keep you updated while we work on a fix. Unless you prefer otherwise, we credit you in the advisory.