Skip to content

Latest commit

 

History

History
59 lines (37 loc) · 2.04 KB

File metadata and controls

59 lines (37 loc) · 2.04 KB

Security Policy

Supported Versions

The following versions are currently supported with security updates:

Version Supported
Latest Yes
Older versions No

If you are using an older version, we recommend upgrading to the latest version to receive security fixes and improvements.

Reporting a Vulnerability

If you believe you have found a security vulnerability, please do not disclose it publicly through GitHub issues, discussions, forums, or social media.

Instead, please report it to us by email at:

hi@olares.com

To help us investigate the issue efficiently, please include as much of the following information as possible:

  • A clear description of the vulnerability
  • Steps to reproduce the issue
  • Proof of concept (PoC), if available
  • Affected product, version, or environment
  • Potential impact of the issue
  • Any relevant screenshots, logs, or recordings

Our Response Process

After receiving your report, we will:

  1. Acknowledge receipt of the report as soon as reasonably possible
  2. Review and validate the issue
  3. Investigate the impact and determine remediation steps
  4. Keep you informed of the progress when appropriate

Please note that response and resolution times may vary depending on the complexity and severity of the issue.

Responsible Disclosure

We kindly ask that you:

  • Give us a reasonable amount of time to investigate and address the issue before any public disclosure
  • Avoid accessing, modifying, or deleting data that does not belong to you
  • Avoid actions that may negatively affect the availability or integrity of our services
  • Act in good faith to avoid privacy violations, service disruption, or data destruction

Rewards

We do not currently operate a formal bug bounty program.

However, if a reported issue is confirmed to be valid and responsibly disclosed, we may offer a reward at our discretion.

Thank You

We sincerely appreciate the time and effort of security researchers and users who help us improve the security of our products and services.