SECURITY.md (629B)
1 # Security Policy 2 3 ## Reporting a Vulnerability 4 5 We take security seriously. 6 7 If you discover a security vulnerability within Mojic (e.g., in the `CipherEngine` logic or the PRNG implementation), please send an e-mail to **amitdutta4255@gmail.com** or **mail@amit.is-a.dev**. All security vulnerabilities will be promptly addressed. 8 9 **Please do not open public issues for security vulnerabilities.** 10 11 ### Scope 12 * **Supported:** Issues regarding key derivation, salt collisions, HMAC integrity failures, or stream buffer overflows. 13 * **Not Supported:** Brute-forcing weak passwords (users are responsible for password strength).