Only the latest deployment receives security updates.

Do not open a public GitHub issue for security vulnerabilities.

Please email security@webrenew.io with:

1. A description of the vulnerability
2. Steps to reproduce
3. Affected pages or components
4. Any potential mitigations you've identified

A PGP key for encrypted reports may be added in the future.

• Acknowledgment: Within 72 hours
• Initial assessment: Within 7 days
• Resolution or disclosure: Within 90 days for critical issues

We will work with you to understand and validate the report. Once confirmed, we will coordinate disclosure and crediting.

• The mogplex-docs website and its source code
• Build and deployment configuration
• Any client-side code served by the documentation site

• Issues in upstream dependencies (report these to the respective maintainers)
• Typographical errors or broken links (open a regular issue instead)
• The Fumadocs framework itself (report to fumadocs maintainers)
• Third-party services integrated with the site

We appreciate the security research community's efforts in responsibly disclosing vulnerabilities. Contributors who report valid vulnerabilities will be acknowledged here (with permission).

No acknowledgments yet.