Skip to content

Security: ohmyzsh/ohmyzsh

SECURITY.md

Security Policy

Supported Versions

At the moment Oh My Zsh only considers the very latest commit to be supported. We combine that with our fast response to incidents and the automated updates to minimize the time between vulnerability publication and patch release.

Version Supported
master
other commits

In the near future we will introduce versioning, so expect this section to change.

Reporting a Vulnerability

Do not submit an issue or pull request: this might reveal the vulnerability.

Instead, you should use the form to privately report a vulnerability to us via GitHub or email the maintainers directly at: [email protected].

We will deal with the vulnerability privately and submit a patch as soon as possible.

There aren’t any published security advisories