mirror of https://github.com/l0ng-ai/openidea.git synced 2026-11-14 16:07:52 +00:00

Files

T

l0ng-ai ad39bda16f docs: add security policy for private vulnerability reports (#2449 )

SECURITY.md asks for vulnerability reports through GitHub's private advisory form and says what to include; the issue chooser links the same form.

2026-11-11 00:01:58 +08:00

930 B

Raw Blame History

Security policy

Reporting a vulnerability

Please do not report security problems in public issues, pull requests or discussions.

Report them privately through GitHub: Report a vulnerability (repository Security tab → Report a vulnerability). Only the maintainers can see the report.

Include what you can of:

the affected version, platform, and whether remote development (openidea-server) or plugins are involved;
steps to reproduce, or a proof of concept;
the impact you expect, and any fix you suggest.

We will acknowledge the report, keep you updated in the advisory, and agree on a disclosure date with you. Fixes are released as a new version, and the advisory is published once users can update.

Supported versions

Security fixes go into the latest release. Please check that the problem still occurs there before reporting.

930 B Raw Blame History

Security policy

Reporting a vulnerability

Supported versions

930 B

Raw Blame History