Skip to content

Security Policy & Vulnerability Reporting

AirDB takes security and data privacy seriously, especially because the engine is designed for disaster zones, emergency medical camps, and off-grid financial transactions.

Supported Versions

Version Supported
0.2.x Yes (Current release)
< 0.2.0 No

Reporting a Vulnerability

If you discover a security vulnerability in AirDB:

  1. Do not create a public GitHub Issue.
  2. Report the vulnerability privately via GitHub Private Vulnerability Reporting.
  3. Include:
  4. A description of the vulnerability.
  5. Steps to reproduce or proof-of-concept code.
  6. An assessment of the potential impact (e.g. over-the-air packet injection, replay vulnerability, or unauthorized mutation).

We acknowledge receipt of security reports within 48 hours and provide regular status updates until a patch is released.