The following table lists the versions of OpenWA-Python that are currently being supported with security updates. We highly recommend always upgrading to the latest patch release of a supported version.
| Version | Supported |
|---|---|
| 1.1.x | ✅ |
| 1.0.x | ✅ |
| < 1.0 | ❌ |
DO NOT report security vulnerabilities through public GitHub issues.
If you discover a potential security vulnerability in OpenWA-Python, please report it immediately using one of the following methods:
- Email: bonheurndezenc@gmail.com
- GitHub Security Advisories: Create a private advisory via the project's Security tab (if enabled).
To help us validate and fix the vulnerability quickly, please include as much of the following information as possible:
- Type of vulnerability (e.g., XSS, SQLi, SSRF)
- Full paths of affected files or API endpoints
- Step-by-step instructions to reproduce the issue
- Proof-of-concept (PoC) or exploit code
- Impact assessment (what an attacker could achieve)
We take security seriously and aim to address issues promptly. Depending on the severity of the vulnerability, you can expect the following timelines:
| Severity | Initial Response | Resolution Target |
|---|---|---|
| Critical | 24 hours | 7 days |
| High | 48 hours | 14 days |
| Medium | 7 days | 30 days |
| Low | 14 days | 90 days |
- We will acknowledge receipt of your vulnerability report within 48 hours.
- We will confirm the vulnerability and work closely with you on a fix.
- We will notify you when the fix is released.
- With your permission, we will credit you in the official security advisory.
Thank you for helping keep OpenWA-Python and its community secure!