Skip to content

Latest commit

 

History

History
49 lines (33 loc) · 1.65 KB

SECURITY.md

File metadata and controls

49 lines (33 loc) · 1.65 KB

Security Policy

Supported Versions

The following versions of DataQuerying are currently supported and receive security updates:

Version Supported
1.0.x ✅

Reporting a Vulnerability

If you discover a security vulnerability, please follow these steps:

  1. Do Not Report Publicly:

    • Avoid publicly disclosing the vulnerability (e.g., opening an issue or PR) to prevent potential exploitation.

  2. Contact Us Securely:

    • Email [email protected] with the following information:
      • A detailed description of the vulnerability.
      • Steps to reproduce the issue.
      • The potential impact of the vulnerability.
      • Any suggested fixes or patches.

  3. Response Time:

    • We will acknowledge receipt of your report within 48 hours.
    • We aim to provide a resolution or mitigation plan within 7-14 days, depending on the severity and complexity.

Security Best Practices

To ensure the security of your deployment:

  • Always use the latest version of the project.
  • Keep dependencies up to date.
  • Review and test your configuration before deploying.

Vulnerability Disclosure Policy

We follow a coordinated disclosure policy:

  • Once a fix is developed, we will notify the affected users before releasing the patch.
  • If you report a vulnerability, we will credit you (if desired) in the release notes, unless anonymity is requested.

Questions or Concerns?

If you have any other security-related questions, feel free to reach out to us at [email protected].