Vulnerability disclosure

Report suspected DominusVault vulnerabilities privately at security@dominusvault.pl. Preferred languages: Polish or English.

Please include affected version, installation type, reproduction steps, impact and whether active exploitation is suspected.

DominusVault follows coordinated vulnerability disclosure, publishes CycloneDX SBOM artifacts with every release on the downloads page, and ships security updates under a defined process.

SBOM

Software Bill of Materials with each release

For every product version we publish a CycloneDX (JSON) SBOM next to the Windows installer and Docker package — the Python dependency inventory used in that build.