Security Issues
This forum is intended for the discussion of general security topics, best practices, and non-sensitive security concerns related to TrellisCart.
Do NOT post detailed information about critical vulnerabilities, exploits, or security weaknesses that could expose or jeopardize user data, store integrity, or system security. Publicly disclosing such information before a fix is available can put other users at serious risk.
If you discover a critical security issue or potential vulnerability, you are required to report it privately to the TrellisCart team. This allows us to investigate, develop a fix, and release a security update as quickly as possible.
Once a patch has been deployed and has had reasonable time to be adopted by users, we will provide a public disclosure outlining:
The nature of the issue
The impact it could have had
The steps taken to resolve it
This process is not about withholding information. It is about protecting the community, preventing exploitation, and ensuring responsible disclosure.
We appreciate your cooperation and your role in helping keep TrellisCart secure for everyone.