Only the latest release on the development branch is actively supported with security updates.

If you discover a security vulnerability in Tutors, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please use GitHub Security Advisories to report the vulnerability privately.

• A description of the vulnerability and its potential impact
• Steps to reproduce the issue
• Any relevant logs, screenshots, or proof-of-concept code
• The version(s) of Tutors affected
• Any suggested fix, if available

• Initial response: within 7 business days
• Status update: within 14 business days of the initial report
• Resolution: dependent on severity and complexity

We will work with you to understand and address the issue. Once a fix is available, we will coordinate disclosure with you.

This repository is maintained by @edeleastar and @jouwdan. Security reports submitted through GitHub Security Advisories will be reviewed by the maintainers.