Supported Versions

Reporting a Vulnerability

If you discover a security vulnerability in Libmagicxx, we would appreciate your help in disclosing it to us in a responsible manner. To report a vulnerability, please follow these steps:

1. Email the Vulnerability: Send an email to oguz.toraman@tutanota.com with the details of the vulnerability. Please include:
   • A detailed description of the vulnerability
   • Steps to reproduce the vulnerability
   • Any potential impact or severity
   • Your contact information
2. Response Time: We aim to respond to vulnerability reports within 48 hours. You will receive an initial confirmation that we have received your report.
3. Updates: We will provide regular updates on the status of your report. Expect an update at least once a week while we investigate and address the issue.
4. Handling the Report:
   • If the vulnerability is accepted, we will work on a fix and credit you in the release notes unless you prefer to remain anonymous.
   • If the vulnerability is declined, we will provide a detailed explanation as to why it was not accepted.
5. Disclosure Policy: We ask that you do not publicly disclose the vulnerability until we have had a chance to investigate and address it. We are committed to addressing all vulnerabilities promptly and will work with you to coordinate an appropriate disclosure timeline.

Thank you for helping to keep Libmagicxx and our community secure.