mirror of
https://github.com/fluencelabs/rust-libp2p
synced 2025-05-13 11:21:21 +00:00
This PR updates the security policy to encourage users to file security vulnerability reports through https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability The private vulnerability reports will show up here: https://github.com/libp2p/rust-libp2p/security/advisories?state=triage The maintainers will receive GitHub notification about new private vulnerability reports.
12 lines
460 B
Markdown
12 lines
460 B
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
By default we provide security patches for the latest released version only. On request we patch older versions.
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Please do not file a public issue on GitHub. Instead, please [file a private security vulnerability report](https://github.com/libp2p/rust-libp2p/security/advisories/new).
|
|
|
|
If you need further assistance, please reach out to [security@libp2p.io](mailto:security@libp2p.io).
|