Skip to content

Security: fundaments-work/Theorem

Security

SECURITY.md

Security Policy

Supported Versions

We currently provide security updates for the latest stable release only.

Version Supported
1.x (latest)
< 1.0

Reporting a Vulnerability

If you discover a security vulnerability in Theorem, please report it privately by opening a draft security advisory on GitHub:

https://github.com/fundaments-work/Theorem/security/advisories/new

Do not report security vulnerabilities via public GitHub issues — they are visible to everyone.

We aim to acknowledge receipt within 48 hours and provide an initial assessment within 5 business days. Once a fix is ready, we will publish a security advisory and release a patched version.

Scope

  • Tauri desktop app (Linux, macOS, Windows)
  • Android app
  • P2P sync (iroh stack)
  • SQLite database

Out of scope: browser/web version (development only, not production).

There aren't any published security advisories