Skip to content

Latest commit

 

History

History
54 lines (34 loc) · 1.48 KB

File metadata and controls

54 lines (34 loc) · 1.48 KB

Security Policy

Scope

KeyQuest is a downloadable Windows application built with Python. It does not operate as a hosted web service, and it is not designed to collect sensitive personal data from users.

Even so, security issues can still matter. Examples include:

  • vulnerabilities in update or release delivery behavior
  • unsafe installer or packaging behavior
  • dependency vulnerabilities
  • local file handling issues
  • anything that could cause unintended code execution, privilege misuse, or unsafe trust decisions

Supported Versions

Only the latest released version is currently supported for security fixes.

Version Supported
Latest release Yes
Older releases No

Reporting a Vulnerability

Please do not open a public GitHub Issue for a suspected security problem.

Instead, report it privately by email:

  • help@webfriendlyhelp.com

Please include:

  • a short summary of the issue
  • affected version
  • steps to reproduce, if known
  • impact
  • any suggested mitigation

If you are unsure whether something is a security issue or a regular bug, err on the side of private reporting first.

Response Expectations

The project will try to:

  • acknowledge receipt within 7 days
  • assess whether the report is in scope
  • coordinate a fix or mitigation if the issue is confirmed

Response times may vary because this is a small project, but good-faith reports are appreciated.

Disclosure

Please allow time for a fix before sharing details publicly.