opendesk

Supported versions

Security fixes are provided for the latest release on the default branch. Older releases and unmaintained forks are not supported; upgrade to the latest version before reporting an issue that may already be fixed.

Reporting a vulnerability

Do not open a public issue, pull request, or discussion for a suspected vulnerability, and do not include exploit details in public channels.

Report privately through GitHub Security Advisories:

https://github.com/ikhsanddy/opendesk/security/advisories/new

Please include:

• The affected version, commit, or branch.
• A description of the vulnerability and its security impact.
• Reproduction steps or a minimal proof of concept, with any required configuration.
• Whether the issue affects a default installation.

Remove real customer data, credentials, tokens, and personal information from reports and attachments. Use test records instead.

Response expectations

Reports are reviewed on a best-effort basis. Acknowledgment, assessment, and fix timelines depend on severity, reproducibility, and maintainer availability, so no fixed response time is promised. Please allow time for investigation and coordinated disclosure before publishing details; the maintainers will discuss disclosure timing with you through the advisory.