Skip to content

Security: badhope/tutor

Security

SECURITY.md

Security Policy

Supported Versions

Use this section to tell people about which versions of your project are currently being supported with security updates.

Version Supported
1.0.x
< 1.0

Reporting a Vulnerability

If you discover a security vulnerability within this project, please send an e-mail to security@argumentative.dev. All security vulnerabilities will be promptly addressed.

Please do not create public GitHub issues for security vulnerabilities.

What to include in a security report:

  • Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
  • Full paths of source file(s) related to the manifestation of the issue
  • The location of the affected source code (tag/branch/commit or direct URL)
  • Any special configuration required to reproduce the issue
  • Step-by-step instructions to reproduce the issue
  • Proof-of-concept or exploit code (if possible)
  • Impact of the issue, including how an attacker might exploit the issue

What to expect

  • You will receive acknowledgement of your report within 48 hours
  • You will receive a detailed response about the next steps within 96 hours
  • Security fix process:
    1. Confirm the issue
    2. Determine affected versions
    3. Audit code to find any similar problems
    4. Prepare fixes for all supported versions
    5. Release patches and publish security advisory

We appreciate your effort in disclosing this issue responsibly and will make every effort to acknowledge your contributions.

There aren't any published security advisories