We actively support the following versions of Yapper AI with security updates:
| Version | Supported |
|---|---|
| 5.1.x | ✅ |
| 5.0.x | ❌ |
| 4.0.x | ✅ |
| < 4.0 | ❌ |
If you're using an unsupported version, we recommend upgrading to a supported version to ensure you receive the latest security fixes.
We take security issues seriously and appreciate your efforts in responsibly disclosing vulnerabilities. If you discover a security vulnerability, please follow these steps:
-
Contact Us:
Email us at shashanklhr with a detailed description of the issue. Include:- Affected version(s).
- Steps to reproduce the vulnerability.
- Potential impact of the issue.
-
Response Timeline:
- We aim to acknowledge your report within 48 hours.
- You can expect a detailed update within 5 business days, outlining our assessment and next steps.
-
What to Expect:
- If the issue is valid, we will work on a fix and credit you in our release notes, if desired.
- If the issue is declined, we will provide an explanation for our decision.
-
Responsible Disclosure:
Please refrain from publicly disclosing the vulnerability until we have resolved it and released a patch.
To maintain a secure environment when using Yapper AI, we recommend:
- Regularly updating to the latest version.
- Using strong authentication methods (e.g., secure Firebase login).
- Reporting any unusual behavior or potential security issues promptly.