Skip to content

Repository navigation

Security: crisap94/herdr-plugins

Security

Report a vulnerability

SECURITY.md

Security policy

Reporting a vulnerability

Report it privately through GitHub's private vulnerability reporting: https://github.com/crisap94/herdr-plugins/security/advisories/new.

Do not open a public issue or a pull request for a vulnerability before it is fixed.

Include what you found, the plugin and version, the steps to reproduce it, and its effect. Do not send transcripts, secrets or private paths; describe them instead.

What to expect

  • An acknowledgement within 14 days of your report.
  • A fix, or a plan for one, within 90 days. If a fix takes longer, the advisory says why.
  • Credit in the advisory, unless you ask not to be named.

Supported versions

Only the latest release of each plugin receives fixes. The releases are listed in each plugin's CHANGELOG section in CHANGELOG.md.

There aren't any published security advisories