The VidGen maintainers take the security of our platform and user data seriously. We appreciate the responsible disclosure of security vulnerabilities by security researchers and open-source developers.
| Version | Supported |
|---|---|
| Main Branch | ✅ Supported |
| < 1.0.0 | ❌ End of Life |
If you discover a security vulnerability in VidGen:
- Do NOT open a public GitHub issue.
- Email your findings confidentially to
security@vidgenerator.ai. - Include:
- Type of vulnerability (e.g. SQL Injection, XSS, SSRF, Broken Auth)
- Step-by-step proof of concept (PoC) to reproduce
- Potential impact of the issue
- Acknowledgement: We will acknowledge receipt of your report within 48 hours.
- Triage & Patching: We will investigate and publish a patch within 14 days for critical vulnerabilities.
- Credit: We will publicly credit your contribution in the security advisory release notes.