Below are the versions of @uhlhosting/medusa-notification-postal that currently receive security updates.

We take the security of our plugins seriously. If you find a security vulnerability, please do not report it in the public issue tracker. Instead, follow the responsible disclosure process below:

1. Email Directly: Send a detailed report to the security team at devops@uhlhost.net.
2. GitHub Private Vulnerability Reporting: If you prefer, you can submit a report privately via the "Security" tab on the GitHub repository at https://github.com/uhlhosting/medusa-notification-postal using the Private Vulnerability Reporting feature.

To help us triage and resolve the issue quickly, please include:

• A clear description of the vulnerability and its potential impact.
• Step-by-step instructions or a proof-of-concept (PoC) script to reproduce the issue.
• Details of the environment (e.g., Node.js version, package version).

• Acknowledgment: You will receive an initial response confirming receipt of your report within 48 hours.
• Triage & Status Updates: We will investigate the report and provide updates at least once every 5 to 7 days.
• Remediation: Once the vulnerability is confirmed, we will coordinate a fix and publish a patch release.
• Responsible Disclosure: We ask that you do not disclose the vulnerability publicly or to third parties until we have had a reasonable amount of time to release a patch and coordinate a public advisory.