Currently, the following versions of the KSSEM College ERP System receive security updates:
| Version | Supported |
|---|---|
| 1.x.x | ✅ |
| < 1.0.0 | ❌ |
We take the security of this project seriously. If you find a security vulnerability, please do not report it publicly via GitHub issues. Instead, please follow the steps below:
- Email the Maintainer: Send a detailed email to the project administrator/owner at Pranav.
- Details to Include:
- A description of the vulnerability.
- The steps required to reproduce it (including a Proof of Concept if possible).
- The potential impact of the vulnerability.
- Response Time: We will acknowledge receipt of your vulnerability report within 48 hours and work with you to resolve it as quickly as possible.
We encourage developers and administrators running this system to follow these best practices:
- Environment Variables: Always keep your
.env.localfile secure and never commit it to source control. - Firebase Security Rules: Ensure that Firestore rules are properly deployed to prevent unauthorized read/write access. Do not run in test mode in production.
- Dependency Management: Regularly audit and keep packages updated, especially when Dependabot alerts are triggered.