Skip to content

Security: MerapiPanel/MerapiPanel

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you believe you have found a security vulnerability in the Merapi Panel, please report it to us privately. To report a security issue, follow these steps:

  1. Do Not Disclose Publicly: Do not disclose the issue publicly until we've had a chance to address it.

  2. Submit a Report: Send an email to durianbohong@gmail.com with a detailed description of the vulnerability. Please include information about the issue's potential impact and any steps to reproduce.

  3. Response: You will receive an acknowledgment of your report within 1-7 business days. We will work with you to verify the vulnerability and plan the necessary steps for resolution.

  4. Coordination: We will keep you informed of our progress and may request additional information if needed.

Responsible Disclosure

We are committed to addressing security issues in a timely manner. To ensure responsible disclosure, we kindly request that you:

  • Do not exploit the vulnerability beyond the minimal necessary to prove its existence.

  • Do not access, modify, or delete data that does not belong to you.

  • Avoid performing any actions that could negatively impact the availability or integrity of our services.

We appreciate your assistance in helping us maintain the security of the Merapi Panel. Your efforts contribute to the safety of our users and the integrity of our software.

Reward and Recognition

As a token of our appreciation for responsibly disclosing vulnerabilities, we may recognize your contribution and list your name in our Hall of Fame (optional).

Thank you for your help in making the Merapi Panel more secure.


Your cooperation and responsible reporting help ensure the security and stability of the Merapi Panel. We value your contributions in keeping our software safe.

There aren’t any published security advisories