Skip to content

Commit

Permalink
Create SECURITY.md
Browse files Browse the repository at this point in the history
  • Loading branch information
junland authored Mar 2, 2023
1 parent 54879eb commit 3f59587
Showing 1 changed file with 15 additions and 0 deletions.
15 changes: 15 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# Security Policy

## Supported Versions

We release patches for security vulnerabilities. Which versions are eligible for
receiving such patches depends on the CVSS v3.1 rating:

| CVSS v3.1 | Supported Versions |
| --------- | ----------------------------------------- |
| 9.0-10.0 | Releases within the previous three months |
| 4.0-8.9 | Most recent release |

## Reporting a Vulnerability

Please report (suspected) security vulnerabilities to [email protected]. You will receive a response from us within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within a few days.

4 comments on commit 3f59587

@Neustradamus
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dear @junland,

Can you relaunch the repository author for your 2 PRs about security.md?

Thanks in advance.

@junland
Copy link
Owner Author

@junland junland commented on 3f59587 Feb 9, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Neustradamus

Not too sure what you mean by "relaunch", can you clarify? Thanks

@Neustradamus
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your 2 PRs have not been merged after one year...

@junland
Copy link
Owner Author

@junland junland commented on 3f59587 Mar 4, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll just leave them open till the maintainer merges gets to them. I'm in no rush.

Please sign in to comment.