This policy applies to every MkDocs NG repository that does not have a
SECURITY.md of its own.
Security fixes go into the latest release of each package and ship as a new release. Older releases are not patched.
| Package | Supported |
|---|---|
mkdocs-ng |
latest release |
mkdocs-sumi |
latest release |
mkdocs-ng-material |
latest release |
Please do not open a public issue, pull request or discussion for a security problem.
Report it privately on GitHub instead: open the Security tab of the affected repository and click Report a vulnerability. Include the package and version, the steps to reproduce it, and what an attacker could do with it.
- An acknowledgement within a few days.
- A fix in a new release, and a published security advisory.
- Credit in the advisory, unless you prefer not to be named.