Skip to content

Security: mPhpMaster/echo-sub

Security

SECURITY.md

Security Policy

Supported versions

Security fixes are released for the latest version of EchoSub. Please update to the newest release before reporting an issue.

Version Supported
1.x (latest) ✅
older ❌

Reporting a vulnerability

Please do not report security issues in public GitHub issues.

Email Mohammad Al-Safadi at mPhpMaster@gmail.com with:

  • A description of the issue and its impact.
  • Steps to reproduce, or a proof of concept.
  • The EchoSub version and Windows version you tested.

You will receive an acknowledgement within 7 days. Once the issue is confirmed, a fix will be prepared and released, and you will be credited in the release notes unless you prefer to stay anonymous.

Scope

In scope: the EchoSub application, its installer, and the build scripts in this repository.

Out of scope: vulnerabilities in third-party libraries or models (please report those to their projects — see THIRD_PARTY_NOTICES.md), and issues that require an attacker who already controls your Windows account.

There aren't any published security advisories