We currently offer security updates for the following Vald versions:
| Version | Supported |
|---|---|
| v1.7.x | ✅ |
| v1.6.x | ✅ |
| < v1.6 | ❌ |
At Vald, we prioritize software security. If you discover a security vulnerability, please report it to vald@vdaas.org.
When reporting a vulnerability, please provide:
- A clear and concise description of the vulnerability.
- Steps to reproduce the issue.
- Any relevant versions or configurations to aid in diagnosing the problem.
- Any potential solutions or mitigations you may know of.
We will assess your report promptly and respond as soon as possible. Once we reply, we will keep you informed about the fix progress and a comprehensive announcement. We value your responsible disclosure and will recognize your contributions.
Our goal is to address all reported security issues promptly. Upon confirming a security concern, we will promptly release patch updates for the two most recent Vald minor versions. We advise all users to apply security updates as soon as they become available.
Thank you for contributing to the safety of Vald and its users.