f63a2c8ef6
Co-authored-by: J. Lavoie <j.lavoie@net-c.ca> Co-authored-by: Yaron Shahrabani <sh.yaron@gmail.com> Co-authored-by: Wellington Terumi Uemura <wellingtonuemura@gmail.com> Co-authored-by: Oğuz Ersen <oguzersen@protonmail.com> Co-authored-by: SC <lalocas@protonmail.com> Co-authored-by: dkstiler <dkstiler@gmail.com> Co-authored-by: Milo Ivir <mail@milotype.de>
25 lines
1.0 KiB
Markdown
25 lines
1.0 KiB
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
As announced in the [README](README.md) I only support the latest available release and master.
|
|
|
|
| Version | Supported |
|
|
| ------- | ------------------ |
|
|
| master | :white_check_mark: |
|
|
| 1.16 | :white_check_mark: |
|
|
| < 1.16 | :x: |
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Please read the [Bughunter](https://www.kimai.org/documentation/bughunter.html) documentation before posting,
|
|
and then you can report any security related vulnerability in the [advisories section at GitHub](https://github.com/kevinpapst/kimai2/security/advisories) or via email to kpapst@gmx.net.
|
|
|
|
I will work as fast as I can to fix the problem and publish a bugfix release / security update.
|
|
Depending on the size of the required fixes, this might take a couple of hours or a couple of days.
|
|
|
|
You can expect that your message will be answered ASAP.
|
|
|
|
If your issue is valid and after I verified and fixed it, you will be mentioned in the release notes.
|
|
I am grateful for any (discrete) disclosure of vulnerabilities!
|