# Security Policy

## Supported Versions

Currently all versions are supported.

| Version | Supported          |
| ------- | ------------------ |
| 1.0.0   | ✔️                  |

## Reporting a Vulnerability

A vulnerability is currently defined as being able to get the session ID with only a mod that gets loaded after NoSession loads its tweaker.<br>
Vulnerabilities that are out of scope are defined as those that NoSession itself cannot prevent.

However, if you can produce a patch for an out of scope vulnerability, a bug bounty will be awarded as well.

The bug bounty is a $5 USD Amazon Gift Card. I might run out, so it's awarded on a first come, first serve basis.

Report the bug bounty by emailing admin@malwarefight.gq or by sending a DM to PandaNinjas#3017 on Discord.<br>
If you would like, you can encrypt the message with my [public GPG key](https://raw.githubusercontent.com/pandaninjas/pandaninjas/main/pandaninjas-publickey.key)<br>
Your bug bounty may be invalidated if you disclose it to the public before.