The team takes security vulnerabilities seriously. We appreciate your efforts to responsibly disclose any issues you find.

Only the latest major version receives active maintenance and security updates. We strongly encourage all users to upgrade to the latest release.

Please do not report security vulnerabilities through public GitHub issues or discussions.

GitHub Security Advisories:
Submit a private report through GitHub Private Vulnerability Reporting. This allows safe, encrypted communication and coordinated disclosure.

To help us investigate and resolve the issue quickly, please include:

• A clear description of the vulnerability and its potential security impact.
• Step-by-step instructions or a minimal proof of concept (PoC) to reproduce the behavior.
• Affected versions of jQuery SmartWizard, jQuery, and relevant browsers or environments.
• Any potential remediations or fixes, if you have identified them.

• Acknowledgment: We will acknowledge receipt of your report within 48–72 hours.
• Investigation & Updates: We will investigate the vulnerability, confirm its severity, and provide regular updates on our progress toward a fix.
• Resolution: If confirmed, a security patch will be prepared and released in a subsequent patch version.
• Disclosure: We will coordinate public disclosure with you, publishing a GitHub Security Advisory and giving proper credit to the reporter (unless anonymity is requested).