Generally, VarFish is developed as free and open source context from members of academic institutions. While we follow programming and engineering best practice and attempt to provide secure and well-working software, VarFish comes without warranty, see the license for more detail. This section defines security-related policies.
Varfish is currently developed in a linear fashion. Only the latest version will receive security updates and they will come in the form of the "next" version.
If you find a vulnerability then please send an email to [email protected].