If you find a security vulnerability in sqltree, please report it responsibly:
- Do not open a public issue.
- Email the maintainer directly or use GitHub's private vulnerability reporting.
- Include steps to reproduce the issue and any relevant details.
We aim to acknowledge reports within 48 hours and provide a fix or mitigation plan within 7 days.
| Version | Supported |
|---|---|
| 1.x | ✅ |
| < 1.0 | ❌ |
- Connection string handling and credential storage
- SQL injection through the TUI interface
- Dependency vulnerabilities