Skip to content

Security: HansenChristoffer/GoAddons

Security

SECURITY.md

Security Policy

Supported Versions

Use of supported versions is highly encouraged. Only the following versions of GoAddons are currently being supported with security updates:

Version Supported
1.0.0
< 1.0.0

Reporting a Vulnerability

The safety and security of our project and its community are of utmost importance to us. If you believe you have found a security vulnerability in GoAddons, we encourage you to report it to us as soon as possible. Please follow the guidelines below to report a vulnerability.

How to Report a Vulnerability

  1. Confidentiality: To ensure the security of our project, please keep the vulnerability confidential until we've had the opportunity to address it. Do not disclose it publicly or to any third parties.

  2. Contact: Send your vulnerability report via email to chris.hansen.ch@outlook.com.

  3. Information to Include: Provide as much information as possible about the vulnerability, including:

    • The version(s) affected.
    • A description of the vulnerability and its potential impact.
    • Steps to reproduce or proof-of-concept (if possible, within the bounds of responsible disclosure).

What to Expect After Reporting

  • Acknowledgment: We aim to acknowledge receipt of your vulnerability report within 48 hours.

  • Communication: Our security team will review your report and may contact you for further information. We'll keep you informed of our progress as we investigate and address the issue.

  • Resolution: Once the vulnerability has been evaluated and confirmed, we will work diligently to develop a fix and release a security update. We'll notify you when the security update is available.

  • Disclosure: After the vulnerability has been addressed, we will coordinate with you to determine the best way to publicly disclose the vulnerability responsibly.

We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your contributions.


There aren’t any published security advisories