| Version | Supported |
|---|---|
| 1.0.x | ✅ |
If you discover a security vulnerability in Log Analyzer, please report it responsibly:
DO NOT open a public GitHub issue for security vulnerabilities.
How to report:
- GitHub Security Advisories: Use the "Report a vulnerability" button in the Security tab
What to include in your report:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
Response timeline:
- Initial response: Within 48 hours
- Status update: Within 7 days
- Fix timeline: Depends on severity (Critical: 7 days, High: 14 days, Medium: 30 days)
This project follows these security practices:
- Dependencies are monitored via Dependabot
- All user inputs are validated and sanitized
- File uploads are handled in temporary directories and deleted after processing
- Log data may contain sensitive information - never commit parsed logs to public repositories
- The application runs on localhost only by default