|
| 1 | +--- |
| 2 | +name: Report a security vulnerability |
| 3 | +about: Report a security vulnerability to help us improve |
| 4 | +title: "[SECURITY] Write a concise title here" |
| 5 | +labels: security |
| 6 | +assignees: "" |
| 7 | +--- |
| 8 | + |
| 9 | +<!-- If you believe you have found a security vulnerability in our project, please follow these steps to report it to us. We appreciate your efforts in disclosing the issue responsibly and will work with you to address the problem promptly. --> |
| 10 | + |
| 11 | +# Security Vulnerability Report |
| 12 | + |
| 13 | +## Title |
| 14 | + |
| 15 | +[Concise title describing the vulnerability] |
| 16 | + |
| 17 | +## Contact Information |
| 18 | + |
| 19 | +[Your contact information - email or other preferred means of contact] |
| 20 | +[Remember that this information may be publicly visible depending on the project's settings] |
| 21 | + |
| 22 | +## Description |
| 23 | + |
| 24 | +[Detailed description of the vulnerability, including steps to reproduce if possible] |
| 25 | + |
| 26 | +## Supporting Documentation |
| 27 | + |
| 28 | +[Attach any supporting documentation, code, or relevant information] |
| 29 | + |
| 30 | +## Impact |
| 31 | + |
| 32 | +[Describe the impact of the vulnerability] |
| 33 | + |
| 34 | +## Suggestions to Fix |
| 35 | + |
| 36 | +[If you have suggestions on how to fix the vulnerability, please include them here] |
| 37 | + |
| 38 | +## Steps to uncover |
| 39 | + |
| 40 | +[If you have suggestions on how to uncover the vulnerability, please include them here] |
| 41 | + |
| 42 | +## Steps to reproduce |
| 43 | + |
| 44 | +[If you have suggestions on how to reproduce the vulnerability, please include them here] |
| 45 | + |
| 46 | +## Severity |
| 47 | + |
| 48 | +[Low/Medium/High] |
| 49 | + |
| 50 | +## Affected Versions |
| 51 | + |
| 52 | +[List affected versions here] |
| 53 | + |
| 54 | +## Checklist |
| 55 | + |
| 56 | +- [ ] I have filled out all the fields above |
| 57 | +- [ ] I have searched for a similar issue in the project and found none |
| 58 | +- [ ] I have tagged the issue with the label "security" |
| 59 | +- [ ] I understand that I may be contacted for further information and my contact information lies in the issue which may be publicly visible depending on the project's settings |
| 60 | +- [ ] I understand and agree to license the code I am providing under the project's license |
| 61 | + |
| 62 | +<!-- |
| 63 | +After creating the issue, tag it with the label "security". This will notify the project maintainers and we will respond as soon as possible. |
| 64 | +
|
| 65 | +Our Response: We will acknowledge your report as soon as possible and provide an estimated timeline for when you can expect a resolution. |
| 66 | +
|
| 67 | +Coordination: We will work with you to address the issue, and if necessary, coordinate the release of a fix. |
| 68 | +
|
| 69 | +Bounty: We do not offer a bounty for the disclosure of security vulnerabilities for public projects, but we will publicly thank you for your assistance unless you request to remain anonymous. If the project is private, we may offer a bounty at our discretion. |
| 70 | +
|
| 71 | +Code and License: The effective license for the code in the project is applied to the code provided by you in the report. If you provide a patch, you agree to license the code under the project's license. |
| 72 | +
|
| 73 | +Legal Safe Harbor: We will not take legal action against you or suspend your account if you follow the responsible disclosure process. We appreciate your assistance in helping us maintain the security of our project. |
| 74 | +--> |
0 commit comments