Only the latest release receives security fixes.

Please do not open a public issue for security vulnerabilities. Instead, report them privately via GitHub security advisories.

Relevant areas for this project include:

• Handling of OTC AK/SK credentials (cloud.conf, the csi-otc-cloud-config Secret)
• RBAC granted by the Helm chart and the privileged Node DaemonSet
• Behavior of attach/detach and format/mount against foreign (non-owned) volumes or paths

We will acknowledge reports as quickly as possible and coordinate a fix and disclosure timeline with you.