The Synapse AI team and open-source contributors take the security and integrity of our compiler, runtime, and ecosystem seriously.
We provide security updates and patches for the following versions:
| Version | Supported |
|---|---|
| 3.0.x | ✅ |
| < 3.0 | ❌ |
If you discover a potential security vulnerability in Synapse AI, please report it responsibly rather than opening a public issue.
GitHub Security Advisory:
- Navigate to the Security Advisories tab on GitHub and click "Report a vulnerability".
- Provide detailed reproduction steps, environment details, and an example minimal
.synscript or input.
- Acknowledgment: We will acknowledge receipt of your vulnerability report within 48 hours.
- Assessment: We will verify and assess the vulnerability severity (CVSS standard).
- Fix & Disclosure: We will work on a coordinated fix, issue a patch release, and credit your contribution in our release notes.