Skip to content

SECURITY.md

Latest commit

 

History

History
35 lines (22 loc) · 1.42 KB

SECURITY.md

File metadata and controls

35 lines (22 loc) · 1.42 KB

Security Policy

Supported Versions

Currently, only the main branch (main) is actively supported with security updates.

Version Supported
v1.0.x ✅
< v1.0 ❌

Reporting a Vulnerability

We take the security of Citation Analyzer seriously. If you believe you have found a security vulnerability in this project, please report it to us as described below.

Please do not report security vulnerabilities through public GitHub issues.

Instead, please send an email to the project maintainers or open a restricted security advisory draft on GitHub.

You should receive a response within 48 hours. If for some reason you do not, please follow up via email to ensure we received your original message.

What to include

Please provide the following information when reporting a vulnerability:

  • A description of the vulnerability and its impact.
  • Steps to reproduce the vulnerability.
  • Any potential mitigation or remediation strategies you are aware of.

Vulnerability Handling Process

  1. We will acknowledge receipt of your report.
  2. We will investigate the vulnerability and determine its severity.
  3. If the vulnerability is confirmed, we will develop a patch and release a new version of the affected software.
  4. We will publicly disclose the vulnerability and provide credit to the reporter (unless you request to remain anonymous).