mirror of
https://github.com/OpenSelena/omniget.git
synced 2026-11-04 08:10:56 +00:00
1.2 KiB
1.2 KiB
Security Policy
Supported Versions
Only the latest minor release receives active security updates and patches.
| Version | Supported |
|---|---|
| 0.14.x | ✅ |
| < 0.14 | ❌ |
Reporting a Vulnerability
Please do not open a public issue for security vulnerabilities.
To report a vulnerability responsibly:
-
GitHub Private Vulnerability Reporting (Preferred): Navigate to the OmniGet Security Advisories page and click "Report a vulnerability". This allows secure, private collaboration and testing of a fix before disclosure.
-
Email: If you cannot use GitHub advisories, email igect@vk.com with:
- A detailed description of the vulnerability
- Step-by-step reproduction instructions or proof-of-concept (PoC)
- Affected OmniGet version(s) and operating system
- Your assessment of severity and impact
Response Timeline
- Initial Response: Within 24-48 hours acknowledging receipt.
- Triage & Confirmation: Within 3-5 days.
- Fix & Disclosure: If confirmed, a fix will be published in the next patch release, and you will be credited in the release notes (unless you prefer to remain anonymous).