For SSH-MITM, security updates and patches will only be provided for the most current release. Users are encouraged to update to the latest version to ensure they receive all security updates and new features.
| Version | Supported |
|---|---|
| Latest | ✅ |
| < Older | ❌ |
If you discover a security issue in SSH-MITM, please report it by following this process. We take all security bugs in SSH-MITM seriously and appreciate your efforts to responsibly disclose your findings.
To report a security issue, please send an email to support@ssh-mitm.at with the following details:
- Description of the vulnerability
- Steps to reproduce (if applicable)
- Impact of the vulnerability
- Any other information you deem important
Upon receiving your email, the SSH-MITM team will:
- Confirm receipt of your vulnerability report
- Investigate and assess the impact of the reported issue
- Work on a fix and prepare a security release if necessary
- Publicly announce the security issue after the fix is released
Your confidentiality and security are important to us. We will endeavor to keep you informed throughout our response process.
Public disclosure of the vulnerability will be coordinated with you. We aim to ensure that our users have a chance to upgrade and secure their systems before the vulnerability is disclosed publicly.
Contributors who report security vulnerabilities will be acknowledged in the release notes of the patch that addresses the issue, if they choose to be.
SSH-MITM values the security and integrity of our users' systems and data. We are committed to continually improving the security of our software. Thank you for your support and cooperation in keeping SSH-MITM safe and secure.