Security Policy

This document describes the security model, supported versions, and vulnerability reporting procedures for asciidoctest.

Supported Versions

Security updates are actively provided for the following versions:

Version	Supported	Notes
`0.2.x`	Yes	Active development branch
`< 0.2.0`	No	Please upgrade to the latest pre-release/release

Executable Documentation Security Context

asciidoctest parses and executes Python code blocks embedded within AsciiDoc (.adoc) files and Python docstrings.

Warning

Executing untrusted .adoc files or Python source code can result in arbitrary code execution within the context and permissions of the user running asciidoctest or pytest.

Only run asciidoctest on trusted input files or within isolated sandbox environments (such as containerized CI workflows).

Reporting a Vulnerability

We take security seriously. If you discover a vulnerability, please report it responsibly rather than opening a public GitHub issue.

Reporting Procedure

Submit a private vulnerability report via GitHub Security Advisories.
Include a detailed description, reproduction steps or PoC, and potential impact.
We will acknowledge receipt within 48 hours and work with you to coordinate a resolution and advisory.