| Version | Supported |
|---|---|
| 2.5.x | ✅ |
| < 2.5 | ❌ |
Please report security issues privately through GitHub's Report a vulnerability flow rather than opening a public issue. You can expect an initial response within a few days.
Photon Ring is an unsafe-heavy, lock-free crate. In scope:
- Memory-safety or data-race bugs in the ring, seqlock protocol, or
atomic-slotsstripes. - Soundness holes in the
Podbound or the derive macros (e.g. a safe API that admits a non-Podtype). - Undefined behavior reproducible under Miri on a default build.
Note that default-features = false selects the older volatile slot
implementation, which is a deliberate data race under the Rust abstract machine
— correct on real hardware, but flagged by Miri. That specific, documented
behavior is not a vulnerability; the default build is formally sound. Reports of
additional soundness gaps are welcome.