Security fixes are provided for the latest released version of USG.
| Version | Supported |
|---|---|
| 4.2.x | ✅ |
| < 4.2 | ❌ |
Users are encouraged to keep USG updated to the latest available release.
If you discover a security vulnerability in USG, please do not report it through a public GitHub issue.
Please report security vulnerabilities privately by contacting:
E-mail: alovada.med@gmail.com
When reporting a vulnerability, please include, when possible:
- the affected USG version;
- operating system and version;
- a description of the vulnerability;
- steps required to reproduce the issue;
- the potential security impact;
- relevant logs or screenshots.
Please do not include real patient data, credentials, database contents, private keys, access tokens, or other sensitive information in vulnerability reports.
USG is intended for use in a medical environment and may process sensitive patient information.
Security reports involving patient data should use only anonymized or synthetic data. Do not upload patient databases, medical documents, images containing identifiable patient information, or other confidential medical information to public GitHub issues.
Please allow reasonable time for a reported vulnerability to be investigated and, when necessary, fixed before publicly disclosing technical details.