We release security updates and bug fixes for the current and recent versions:

The Wowool Java SDK team takes the security of our software seriously. If you discover a security vulnerability, please do not disclose it in a public GitHub issue.

1. GitHub Security Advisory (Recommended): Submit a private advisory through GitHub by navigating to the Security Advisories tab and clicking "New draft security advisory".

2. Direct Email: If you cannot use GitHub Security Advisories, send an email to: rik.doclo@outlook.com

Please include in your report:

• A detailed description of the vulnerability.
• Steps or a minimal reproducible example (PoC) to reproduce the issue.
• The version of wowool-sdk-java and the Java runtime version (e.g. OpenJDK 22.0.2).
• Your assessment of potential impact or exploitability.

• Acknowledgment: We will acknowledge receipt of your vulnerability report within 48 hours.
• Assessment: We will confirm the issue, assess severity, and determine an remediation plan.
• Fix & Release: We will develop and test a fix, and coordinate release timing.
• Public Disclosure: Once a patched release is published, we will credit you (unless you prefer anonymity) in the release notes.