If you discover a security vulnerability in the Agent Passport System Python SDK, please report it responsibly.
Report privately: https://github.com/agent-passport-system/agent-passport-python/security/advisories Email: security@aeoess.com Response time: We aim to acknowledge within 48 hours and provide a fix timeline within 7 days.
Please include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
Please do NOT:
- Open a public GitHub issue for security vulnerabilities
- Exploit the vulnerability beyond what is needed to demonstrate it
- Share the vulnerability publicly before we've had time to address it
| Package | Supported |
|---|---|
| agent-passport-system >= 3.0.0 | ✅ |
| Older versions | ❌ |
Every agent-passport-system version on PyPI from 0.2.0 through 2.11.0 is
unsupported; the advisory for 3.0.0, GHSA-xxm3-6jwr-hpxr, published at
https://github.com/agent-passport-system/agent-passport-python/security/advisories, describes
the verification defects they carry.