We take the security of PayloadCMS + Typesense Plugin seriously. If you believe you have found a security vulnerability, please report it to us following these steps:

1. DO NOT create a public GitHub issue for the vulnerability.
2. Contact us directly at one of the following:
   • X: @rubixvi
   • Email: Contact Form
   • Facebook: rubixvi

Please include the following details in your report:

• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact of the vulnerability
• Any possible mitigations
• Version of PayloadCMS + Typesense Plugin affected

1. We will acknowledge receipt of your vulnerability report within 48 hours.
2. Our security team will investigate and validate the issue.
3. We will keep you informed about the progress of fixing the vulnerability.
4. Once fixed, we will notify you and publish a security advisory if necessary.

• Security patches are given the highest priority
• Updates will be released as soon as possible after a vulnerability is confirmed
• If a critical vulnerability is found, we will release a patch version immediately

When using PayloadCMS + Typesense Plugin in production:

1. Keep all dependencies up to date
2. Use secure environment variables for sensitive data
3. Regularly backup your database
4. Monitor your application logs for suspicious activity
5. Follow security best practices for Next.js and MongoDB deployments
6. Implement proper authentication and authorization

We continuously monitor our codebase for security issues through:

• Automated dependency scanning
• Regular code reviews
• Third-party security audits
• Community reports

• We follow responsible disclosure practices
• Security issues will be announced via our changelog and security advisories
• Credit will be given to security researchers who report valid vulnerabilities

For any security-related questions, contact:

Rubix Studios Pty. Ltd.
Website: https://rubixstudios.com.au