Skip to content

Security: OpenKotOR/TalkEd

SECURITY.md

Security Policy

Supported Surface

TalkEd is a Delphi 7 desktop application for editing TLK V3.0 talk table files. Security-sensitive reports should focus on:

  • malformed or malicious TLK file handling,
  • unsafe file overwrite or path handling,
  • crashers or corruption triggered by crafted input,
  • data-loss behaviors during save, append, delete, or pad workflows,
  • repository-level secret exposure.

Reporting a Vulnerability

Do not open a normal bug report for a suspected vulnerability.

Instead:

  1. Contact the repository maintainers privately through the repository owner or organization maintainers.
  2. Include a concise impact summary.
  3. Include the affected file paths and workflows.
  4. Provide a minimal reproduction sample only when it is safe to share.
  5. State whether the issue can corrupt TLK data, expose secrets, or execute unintended behavior.

What to Include

  • the TalkEd version or commit under test,
  • operating system and runtime context,
  • whether the issue occurs during load, edit, save, append, search, or launch,
  • whether a crafted .tlk file is required,
  • whether the result is a crash, corruption, or unexpected access.

Response Expectations

This repository does not yet have a formal SLA for private security handling. Reports should still be written so another maintainer can triage and reproduce them quickly.

There aren't any published security advisories