Where this file is silent, the laranail security policy applies.

Only the latest minor release of laranail/db-console receives security fixes.

Please report suspected vulnerabilities privately to security@simtabi.com. Do not open a public issue for security reports.

You should receive an acknowledgement within 72 hours. Please include a description of the issue, steps to reproduce, and any relevant environment details (PHP version, Laravel version, database engine).

Because this package brokers privileged database credentials, reports touching the SecretVault drivers, the identifier validation layer, the RBAC scope resolver, or the audit chain are treated as highest priority.

Prefer GitHub private vulnerability reporting when you can: open it from this repository's Security tab. The report arrives attached to the repo with a draft advisory and a CVE request path already in place. Email is the fallback for anyone who would rather not use GitHub.