BookStack/.github/SECURITY.md

# Security Policy

## Supported Versions

Only the [latest version](https://github.com/BookStackApp/BookStack/releases) of BookStack is supported.
We generally don't support older versions of BookStack due to maintenance effort and
since we aim to provide a fairly stable upgrade path for new versions.

## Security Notifications

If you'd like to be notified of new potential security concerns you can [sign-up to the BookStack security mailing list](https://updates.bookstackapp.com/signup/bookstack-security-updates).

## Reporting a Vulnerability

If you've found an issue that likely has no impact to existing users (For example, in a development-only branch)
feel free to raise it via a standard GitHub bug report issue.

If the issue could have a security impact to BookStack instances, 
please directly contact the lead maintainer [@ssddanbrown](https://github.com/ssddanbrown). 
You will need to log in to be able to see the email address on the [GitHub profile page](https://github.com/ssddanbrown).
Alternatively you can send a DM via Mastodon to [@danb@fosstodon.org](https://fosstodon.org/@danb).

Please be patient while the vulnerability is being reviewed. Deploying the fix to address the vulnerability
can often take a little time due to the amount of preparation required, to ensure the vulnerability has
been covered, and to create the content required to adequately notify the user-base.

Thank you for keeping BookStack instances safe!
Added security policy md file 2021-10-26 23:09:41 +08:00			`# Security Policy`

			`## Supported Versions`

			`Only the [latest version](https://github.com/BookStackApp/BookStack/releases) of BookStack is supported.`
			`We generally don't support older versions of BookStack due to maintenance effort and`
			`since we aim to provide a fairly stable upgrade path for new versions.`

			`## Security Notifications`

			`If you'd like to be notified of new potential security concerns you can [sign-up to the BookStack security mailing list](https://updates.bookstackapp.com/signup/bookstack-security-updates).`

			`## Reporting a Vulnerability`

			`If you've found an issue that likely has no impact to existing users (For example, in a development-only branch)`
			`feel free to raise it via a standard GitHub bug report issue.`

Update SECURITY.md Remove huntr 2023-10-19 23:12:18 +08:00			`If the issue could have a security impact to BookStack instances,`
			`please directly contact the lead maintainer [@ssddanbrown](https://github.com/ssddanbrown).`
Security: Swapped twitter for mastodon link 2023-10-19 23:53:02 +08:00			`You will need to log in to be able to see the email address on the [GitHub profile page](https://github.com/ssddanbrown).`
			`Alternatively you can send a DM via Mastodon to [@danb@fosstodon.org](https://fosstodon.org/@danb).`
Added security policy md file 2021-10-26 23:09:41 +08:00
			`Please be patient while the vulnerability is being reviewed. Deploying the fix to address the vulnerability`
			`can often take a little time due to the amount of preparation required, to ensure the vulnerability has`
			`been covered, and to create the content required to adequately notify the user-base.`

Update SECURITY.md Remove huntr 2023-10-19 23:12:18 +08:00			`Thank you for keeping BookStack instances safe!`