Skip to content

Security: jjcremmers/PyFEM

Security

SECURITY.md

Security Policy

Purpose

PyFEM is an educational finite element code developed for teaching, research, and experimentation. It is intended to illustrate finite element concepts and numerical methods, and is not designed, tested, or certified for production or safety-critical applications.

Users are responsible for validating any results obtained with this software before using them in research, engineering, or industrial applications.


Intended Use

PyFEM is intended for educational purposes. The software is provided "as is", without warranty of any kind. It should not be relied upon for the design, verification, or certification of engineering structures or other safety-critical systems.


Reporting a Vulnerability

If you believe you have discovered a security vulnerability in PyFEM, please do not report it through a public GitHub issue.

Instead, report it privately by contacting the maintainer and include, where possible:

  • a description of the vulnerability;
  • the affected version or commit;
  • steps to reproduce the issue;
  • the potential impact.

Reasonable efforts will be made to acknowledge your report, investigate the issue, and provide a fix where appropriate.


Supported Versions

PyFEM is an educational open-source project.

Only the latest version available on the main branch is considered actively maintained. Older versions may not receive updates.


Scope

Examples of security issues include:

  • arbitrary code execution;
  • privilege escalation;
  • unintended access to files or data;
  • vulnerabilities in dependencies that affect PyFEM.

Numerical inaccuracies, convergence failures, incorrect finite element implementations, or bugs affecting simulation results should instead be reported as ordinary GitHub issues.


Disclosure Policy

Please allow a reasonable period of time to investigate and address the issue before making any public disclosure.

There aren't any published security advisories