MailDev is a development and testing tool and is not intended for use in production environments. It should only be run in trusted, local, or otherwise access-controlled environments. Even so, we take security issues seriously and appreciate reports that help keep the project safe.

Security updates are provided for the following versions:

We recommend always running the latest release.

If you discover a security vulnerability, please report it privately so we can address it before it is publicly disclosed.

• Preferred — GitHub private vulnerability reporting: Use GitHub's built-in private reporting (the "Report a vulnerability" button under the repository's Security tab). This keeps the details confidential and visible only to maintainers.
• Email: If you are unable to use GitHub, you may reach us at maildev.proj@gmail.com.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Please include as much of the following as you can:

• A description of the vulnerability and its potential impact
• Steps to reproduce or a proof of concept
• The affected version(s) of MailDev
• Any suggested remediation, if known

• We aim to acknowledge new reports within 3 business days.
• We will investigate, keep you informed of our progress, and work on a fix.
• Once a fix is released, we are happy to credit you for the discovery unless you prefer to remain anonymous.

Thank you for helping keep MailDev and its users safe.