If you wish to report a security vulnerability privately, we appreciate your diligence. Please follow the guidelines below to submit your report.
Only the latest release is actively maintained for security updates.
To report a security vulnerability, please provide the following information:
- Indicate whether this vulnerability has already been publicly discussed or disclosed. If so, provide relevant links.
- Provide a detailed description of the security vulnerability. Include as much information as possible to help us understand and address the issue.
We kindly ask you to keep the report confidential until a public announcement is made. Please sent me an email instead. You can find the email and GPG key on my GitHub profile.
- Vulnerabilities will be handled on a best-effort basis.
- You may request an advance copy of the patched release, but we cannot guarantee early access before the public release.
- You will be notified via email simultaneously with the public announcement.
- We will respond within a few weeks to confirm whether your report has been accepted or rejected.
Thank you for helping to improve the security of Slyde :D