The following versions of the FedEx-STABLE project are currently being supported with security updates:
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
We take the security of FedEx-STABLE seriously. If you have discovered a security vulnerability or have a security-related concern, please report it to us immediately.
Please do NOT create a public issue for a security vulnerability. instead, use one of the following methods:
-
GitHub Private Vulnerability Reporting (Recommended):
- Go to the "Security" tab of this repository.
- Click on "Advisories".
- Click "Report a vulnerability".
-
Email:
- You can email the maintainers directly at
security@example.com(Replace with actual security contact if available, or rely on GitHub PVR).
- You can email the maintainers directly at
When reporting a vulnerability, please include as much detail as possible:
- Type of Issue: (e.g., SQL Injection, XSS, etc.)
- Full paths of source file(s) related to the manifestation of the issue.
- The location of the affected source code (tag/branch/commit or direct URL).
- Any special configuration required to reproduce the issue.
- Step-by-step instructions to reproduce the issue.
- Proof-of-Concept or exploit code (if available).
- Impact of the issue, including how an attacker might exploit it.
We are committed to addressing security vulnerabilities promptly:
- Acknowledgement: We will acknowledge receipt of your report within 48 hours.
- Assessment: We will assess the severity and impact of the issue within 5 business days.
- Resolution: We aim to release a fix or mitigation as soon as possible, depending on the complexity of the issue.
Thank you for helping us keep FedEx-STABLE safe!