Skip to content

Security: ai-declaration/schema

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you find a security issue in this project, please report it responsibly.

Email: security@resoftlabs.com

We will acknowledge your report within 48 hours and provide an initial assessment within 7 days.

Supported Versions

Version Supported
1.0.x Yes

What Counts as a Security Issue

For a schema project, security concerns include:

  • Regular expression patterns that could cause ReDoS (catastrophic backtracking)
  • Malicious $ref resolution that could lead to SSRF in validators
  • Schema constructs that could cause denial of service in validation engines
  • Privacy concerns with field definitions that encourage storing sensitive data

There aren't any published security advisories