Security fixes are applied to the latest released version of IR-SIM on PyPI. We recommend always running the most recent release.
| Version | Supported |
|---|---|
| latest | ✅ |
| older | ❌ |
Please do not report security vulnerabilities through public GitHub issues.
Instead, report them privately via GitHub's private vulnerability reporting, or by emailing the maintainer at hanrh@connect.hku.hk.
Please include:
- A description of the vulnerability and its impact.
- Steps to reproduce (a minimal scenario YAML or script is ideal).
- The IR-SIM version and Python version affected.
We aim to acknowledge reports within 7 days and to provide a remediation timeline after triage. Thank you for helping keep IR-SIM and its users safe.