Currently, the following versions of RAIGO are supported with security updates.
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
We take the security of RAIGO and our users very seriously. If you discover a vulnerability, we appreciate your help in disclosing it to us in a responsible manner.
Please do not report security vulnerabilities through public GitHub issues.
Instead, please report them to our security team via email at security@periculo.co.uk.
To help us investigate and resolve the issue quickly, please provide as much information as possible, including:
- Description: A clear description of the vulnerability and its potential impact.
- Steps to reproduce: Detailed steps on how to reproduce the issue, including any necessary configuration or environment details.
- Proof of Concept (PoC): If available, provide a PoC or exploit code to demonstrate the vulnerability.
- Potential mitigations: If you have suggestions on how to fix the issue, please include them.
- Acknowledgment: We will acknowledge receipt of your report within 48 hours.
- Investigation: Our security team will investigate the issue and determine its validity and severity. We may contact you for further clarification or assistance during this process.
- Resolution: If the vulnerability is confirmed, we will work to develop a fix and release an update as quickly as possible. We will keep you informed of our progress.
- Disclosure: Once the fix is released, we will publicly disclose the vulnerability, giving you credit for the discovery (unless you prefer to remain anonymous).
Thank you for helping us keep RAIGO secure!