mirror of
https://github.com/GothenburgBitFactory/taskchampion-sync-server.git
synced 2025-06-26 10:54:29 +02:00
13 lines
710 B
Markdown
13 lines
710 B
Markdown
# Security
|
|
|
|
To report a vulnerability, please contact Dustin via signal, [`djmitche.78`](https://signal.me/#eu/2T98jpkMAzvFL2wg3OkZnNrfhk1DFfu6eqkMEPqcAuCsLZPVk39A67rp4khmrMNF).
|
|
Initial response is expected within ~48h.
|
|
|
|
We kindly ask to follow the responsible disclosure model and refrain from sharing information until:
|
|
|
|
1. Vulnerabilities are patched in `taskchampion-sync-server` + 60 days to coordinate with distributions.
|
|
2. 90 days since the vulnerability is disclosed to us.
|
|
|
|
We recognise the legitimacy of public interest and accept that security researchers can publish information after 90-days deadline unilaterally.
|
|
|
|
We will assist with obtaining CVE and acknowledge the vulnerabilities reported.
|