MiniScript 2.0 and all minor versions are currently being supported with security updates. (MiniScript 1.x users are advised to update to MiniScript 2 as soon as possible, though no security-related vulnerabilities are currently known.)
| Version | Supported |
|---|---|
| 2.x | ✅ |
| < 2.0 | ❌ |
If you discover a vulnerability, you can report it by email to: support@miniscript.org
Under normal circumstances, you should expect to receive a reply within a day. You will be informed whether the vulnerability is accepted or declined, with an expected schedule for addressing it. Depending on the severity of the vulnerability, it may trigger an immediate public release as soon as it is fixed, or it may be batched with other updates and released at a later time.
If for some reason email does not work, you can also reach out to the maintainer via Discord (find the Discord link on the MiniScript home page).