CatalystUI's role as a library in the C# framework presents limitations in how security updates are published and distributed. Whilst we highly encourage always using the latest version of the framework, we understand that that is not always a viable option.
CatalystUI LLC is dedicated to providing consistent security updates in the latest released versions of the library. Security updates cannot be guaranteed for prior versions due to the nature of the NuGet distribution system. However, the following major versions of CatalystUI are planned to continue to receive security updates for the foreseeable future:
The following versions of CatalystUI are actively receiving security patches and updates:
| Version | Supported |
|---|---|
| v1.x | ✅ |
Reporting a vulnerability should take varying courses of actions depending on the severity:
Please create an issue describing the vulnerability as a bug report.
Please inform us privately on our Discord server by messaging one of the members of the development team directly, OR you may send us an email at contact@visualfiredev.com.