You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit fd5802b
Browse filesBrowse the repository at this point in the historyBrowse files
Copy file name to clipboardExpand all lines: SECURITY.md
+8-2Lines changed: 8 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,10 +5,16 @@
5
5
| Version | Supported |
6
6
| ------- | ------------------ |
7
7
| 10.1.x | ✅ Feature release |
8
-
| 10.0.x |✅ Fixes only|
8
+
| 10.0.x |⛔ Deprecated|
9
9
| 9.0.x | ⛔ Deprecated |
10
10
| 1.0.x | ⛔ Deprecated |
11
11
12
12
## Reporting a Vulnerability
13
13
14
-
To report a vulnerability please contact the development team confidentially on Discord by contacting `@brain` via a DM on https://discord.gg/dpp - We will discuss via a group chat if necessary and action the fix. Vulnerabilities are actioned and fixed within a 30 day window. Once the fix has been put into a release version, the vulnerability will be disclosed to the public.
14
+
Please report security vulnerabilities using [GitHub's private vulnerability reporting feature](https://github.com/brainboxdotcc/DPP/security/advisories/new).
15
+
16
+
This creates a confidential report that is only visible to the repository maintainers and allows us to coordinate a fix before public disclosure.
17
+
18
+
If you are unable to use GitHub's private reporting feature, you may instead contact the development team confidentially via Discord by sending a direct message to `@brain` in the [DPP server](https://discord.gg/dpp)
19
+
20
+
We aim to investigate and remediate reported vulnerabilities within 30 days where possible. Once a fix has been released in a supported version, the vulnerability will be disclosed publicly.
0 commit comments