Skip to content

Latest commit

 

History

History
15 lines (10 loc) · 899 Bytes

SECURITY.md

File metadata and controls

15 lines (10 loc) · 899 Bytes
Raw

Security Reporting Process

Please, report any security issue to opensourcegroup@netcracker.com where the issue will be triaged appropriately.

If you know of a publicly disclosed security vulnerability please IMMEDIATELY email opensourcegroup@netcracker.com to inform Netcracker team about the vulnerability, so we may start the patch, release, and communication process.

Security Release Process

If the vulnerability is found in the latest stable release, then it would be fixed in patch version for that release. E.g., issue is found in 2.5.0 release, then 2.5.1 version with a fix will be released. By default, older versions will not have security releases.

If the issue doesn't affect any existing public releases, the fix for medium and high issues is performed in a main branch before releasing a new version. For low priority issues the fix can be planned for future releases.