Security Policy

This document describes the security model, supported versions, and vulnerability reporting procedures for asciidoctest.

Supported Versions

Security updates are actively provided for the following versions:

Version	Supported	Notes
`0.2.x`	Yes	Active development branch
`< 0.2.0`	No	Please upgrade to the latest pre-release/release

Executable Documentation Security Context

asciidoctest parses and executes Python code blocks embedded within AsciiDoc (.adoc) files and Python docstrings.

Warning

Executing untrusted .adoc files or Python source code can result in arbitrary code execution within the context and permissions of the user running asciidoctest or pytest.

Only run asciidoctest on trusted input files or within isolated sandbox environments (such as containerized CI workflows).

Reporting a Vulnerability

If you discover a vulnerability, report it using the private security advisory workflow rather than a public issue.

Reporting Procedure

Submit a vulnerability report via GitHub Security Advisories.
Include a description, reproduction steps or PoC, and potential impact.
We will acknowledge receipt within 48 hours and work with you on a resolution.

< Developer Handbook | Changelog >