Currently, the following versions of WalBlob are supported with security updates:

WalBlob is a client-side frontend. The security model assumes:

1. Zero-Knowledge: Encryption happens entirely in the browser using the Web Crypto API (AES-GCM).
2. Key Protection: Encryption keys are never transmitted to any server. They are handled in-memory or stored locally if explicitly requested by the user.
3. Decentralized Storage: Data is stored on the Walrus network. Availability depends on the network's health and the chosen storage epochs.

If you discover a security vulnerability within this project, please do not open a public issue. Instead, please use the GitHub Security Advisories feature to report the vulnerability privately.

1. Navigate to the Security tab of this repository.
2. Click on Advisories in the left sidebar.
3. Click Report a vulnerability to start a private draft advisory.

Alternatively, you can contact the maintainers directly through GitHub. All security vulnerabilities will be promptly addressed.

Please include:

• A description of the vulnerability.
• Steps to reproduce the issue.
• Potential impact.

We ask that you do not disclose the issue publicly until we have had a chance to address it.