| Version | Supported |
|---|---|
| 1.32.x+ | ✅ |
| < 1.32 | ❌ |
If you discover a security vulnerability, please report it responsibly:
- Do NOT open a public GitHub issue
- Send an email to the maintainers with:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Allow reasonable time for a fix before public disclosure
Plaintext Root includes several built-in security features:
- Spring Security integration with CSRF protection
- Role-based access control (ROLE_USER, ROLE_ADMIN, ROLE_ROOT)
- Multi-tenancy isolation (mandate-based data separation)
- Session tracking and audit logging
- API token authentication for REST endpoints
- Secure cookie handling for theme preferences
- Page access guards for menu-based navigation security