Skip to content

SECURITY.md

Latest commit

 

History

History
38 lines (23 loc) · 1.2 KB

SECURITY.md

File metadata and controls

38 lines (23 loc) · 1.2 KB

Security Policy

Supported versions

Version Supported
1.x Yes

Only the latest release on the 1.x line receives security fixes.

Reporting a vulnerability

Do not open a public GitHub issue for security vulnerabilities.

Send a report to:

pompelmideveloper@yahoo.com

Please include:

  • A description of the vulnerability and its potential impact.
  • Steps to reproduce or a minimal proof-of-concept.
  • The version of pompelmi affected.
  • Your suggested fix, if you have one.

We aim to acknowledge reports within 48 hours and provide a resolution or mitigation plan within 14 days for confirmed issues.

Scope

This policy covers the pompelmi package itself (the code in this repository). It does not cover ClamAV, the underlying antivirus engine. Vulnerabilities in ClamAV should be reported directly to the ClamAV security team.

Disclosure policy

We follow a coordinated disclosure model. We ask that you give us a reasonable amount of time to address the issue before any public disclosure.

Contact