Cortex Library is currently maintained on the default branch and latest tagged release. Security fixes are prioritized for versions that can still be built from this repository.
Please do not open public issues for security reports.
Report privately by emailing: security@cortex-library.dev
Include:
- A clear description of the issue.
- Reproduction steps or proof-of-concept.
- Affected commit/tag and Android version.
- Any suggested mitigation.
- Initial acknowledgement: within 5 business days.
- Triage and severity assessment: as soon as reproducible details are available.
- Fix timeline: depends on severity and release impact.
Please allow time for a patch before public disclosure. After a fix is available, maintainers may publish a summary and remediation guidance.