revoice is pre-1.0. Security fixes land on the latest released minor
version. Please upgrade to the newest release before reporting.
| Version | Supported |
|---|---|
| 0.3.x | ✅ |
| < 0.3 | ❌ |
Please report suspected vulnerabilities privately using GitHub's "Report a vulnerability" flow rather than opening a public issue.
Include enough detail to reproduce: the version, a minimal input, and what you observed. I aim to acknowledge reports within a few days and to ship a fix or mitigation as quickly as the severity warrants.
revoice processes audio arrays and small PCM WAV files locally. The most
likely issues are around parsing untrusted WAV input (malformed headers,
extreme sizes). Reports that demonstrate a crash or resource-exhaustion path
from a crafted WAV file are in scope and appreciated.