Vulnerability Management Procedure

Yes. Leo Infinity maintains a vulnerability-management procedure covering dependency updates, code review, build/type checks, provider alerts, secure configuration review, severity-based remediation, and post-fix verification. Evidence: https://app.leo.com.vc/seguranca/vulnerability-management

Policy controls

• Dependencies and framework updates are reviewed during regular maintenance and security fixes.
• Code changes are built and type-checked before production deployment.
• High-risk issues affecting authentication, tokens, protected data, or public exposure are prioritized for immediate remediation.
• Remediation is verified through build checks, endpoint checks, and targeted browser/API testing where applicable.

Evidence notes

• Production deployments are built through the Vercel workflow.
• The repository uses TypeScript and Next.js build validation.
• Security-sensitive middleware changes are tested before release.