Skip to content

Security: superagent-ai/ai-sdk

Security

SECURITY.md

Security Policy

Supported Versions

Security updates are provided for the latest published version of @superagent-labs/ai-sdk. Please upgrade to the latest version before reporting an issue.

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Report vulnerabilities privately through GitHub Security Advisories.

Include as much of the following information as possible:

  • A description of the vulnerability and its potential impact
  • The affected package version and environment
  • Steps to reproduce or a proof of concept
  • Any suggested mitigations or fixes

Please allow the maintainers time to investigate and address the report before disclosing it publicly. We will coordinate disclosure with the reporter when appropriate.

Scope

This policy covers the source code and published npm package in this repository. Vulnerabilities in third-party dependencies should also be reported to the maintainers of the affected dependency.

Learn more about advisories related to superagent-ai/ai-sdk in the GitHub Advisory Database