Use this section to tell people about which versions of your project are currently being supported with security updates.
Version | Supported |
---|---|
1.0.x | ✅ |
1.1.x | ✅ |
1.2.x | ✅ |
< 1.0 | ❌ |
Use this section to tell people how to report a vulnerability.
If you discover a security vulnerability in this project, please follow these steps to report it:
-
Step 1: Submit a report
- Email us at tkalalian@gmail.com with the subject line "Security Vulnerability Report."
-
Step 2: Assessment
- Our security team will triage the vulnerability report and assess its severity.
-
Step 3: Investigation and Response
- We will investigate the reported vulnerability and determine the appropriate course of action.
-
Step 4: Fix and Release
- If the vulnerability is accepted, we will work on developing a fix.
- Once a fix is ready, we will release a security update for the supported versions mentioned in the "Supported Versions" section above.
If you want to go the extra mile and help us improve the security of our project, we encourage you to participate in our Bug Bounty Program. We offer rewards for responsibly disclosed vulnerabilities. Please visit our bug bounty page to learn more about the program and how to participate.
We take security seriously and have implemented the following measures to ensure the safety of our project:
- Regular security assessments and code reviews.
- Continuous monitoring and threat detection.
- Prompt patching of security vulnerabilities.
- Training and awareness programs for our development team to follow secure coding practices.
- Encouraging the community to report security vulnerabilities responsibly.
We believe in responsible disclosure of security vulnerabilities to protect our users and give our team a chance to address the issues before they are publicly disclosed. We kindly request that you follow responsible disclosure practices and refrain from disclosing any vulnerabilities publicly until we have had sufficient time to address them.
Thank you for helping us make our project more secure.