Umputun
f3a7dea1f1
Mention the "Report a vulnerability" button (GitHub private vulnerability reporting) alongside the existing email contact, now that private reporting is enabled on the repository.
16 lines
781 B
Markdown
16 lines
781 B
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
We release patches for security vulnerabilities.
|
|
|
|
| Version | Supported |
|
|
| ------- | ------------------ |
|
|
| current | :white_check_mark: |
|
|
| >=1.6.x | :white_check_mark: |
|
|
| <1.5.x | :x: |
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Please report (suspected) security vulnerabilities either by using GitHub's [private vulnerability reporting](https://github.com/umputun/remark42/security/advisories/new) (click the "Report a vulnerability" button on the [Security tab](https://github.com/umputun/remark42/security)) or by emailing umputun@gmail.com. You will receive a response within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within a few days.
|