Security Policy

Supported versions

This is an open source project that is provided as-is without warranty or liability. As such, there is no supportability commitment. The maintainers will do the best they can to address any report promptly and responsibly.

Reporting a vulnerability

Please use the "Private vulnerability reporting" feature in the GitHub repository (under the "Security" tab).

Important: this policy is intended for vulnerabilities in Mailserver UI itself (e.g., core functionality, scanning logic, or security features).

If you discover a vulnerability in a dependency module (e.g., a third-party library used by Mailserver UI), please do not report it here. Instead, open a ticket in GitHub Discussions so that the maintainers and community can evaluate and address it appropriately.