mirror of
https://github.com/gotenberg/gotenberg.git
synced 2026-08-12 18:32:14 +01:00
30 lines
976 B
Markdown
30 lines
976 B
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
Only the latest version of Gotenberg receives security updates and patches. Keep your environment up to date.
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Do not publish vulnerabilities publicly. Report them through [GitHub's private vulnerability reporting](https://github.com/gotenberg/gotenberg/security/advisories/new).
|
|
|
|
Include:
|
|
|
|
- A detailed description of the vulnerability.
|
|
- Steps to reproduce the issue.
|
|
- Any potential impact on users or the system.
|
|
|
|
This process is handled on a _'best-effort'_ basis. Response speed may vary depending on severity and available resources.
|
|
|
|
## Disclosure Policy
|
|
|
|
Once a vulnerability report is received and confirmed:
|
|
|
|
- A fix and release timeline will be prepared.
|
|
- You will be notified when the fix is released.
|
|
- You will be credited for the discovery (unless you request anonymity).
|
|
|
|
## Comments on this Policy
|
|
|
|
If you have suggestions on how this process could be improved, submit a pull request.
|