The following versions of ORGE are currently supported with security updates:
| Version | Supported |
|---|---|
| 2.0.x | Yes |
| < 2.0.0 | No |
The ORGE team takes file safety, security, and integrity very seriously. Because ORGE directly interacts with the filesystem:
- Never report security vulnerabilities through public GitHub issues.
- Please email vulnerability reports privately to the project maintainers or open a draft GitHub Security Advisory.
Please include:
- Detailed description of the vulnerability (e.g., path traversal, collision edge case, or privilege bypass).
- Steps to reproduce the issue.
- Operating system and environment details.
- Proof-of-concept scripts or filesystem setups.
We will review, acknowledge, and resolve security reports promptly before any public disclosure.