Skip to content

SECURITY.md

Latest commit

 

History

History
26 lines (17 loc) · 966 Bytes

SECURITY.md

File metadata and controls

26 lines (17 loc) · 966 Bytes
Raw

Security Policy

Reporting a vulnerability

Please report vulnerabilities privately through GitHub: Security → Report a vulnerability on this repository (private vulnerability reporting).

Do not open a public issue or pull request for a vulnerability before a fix is released.

Useful details:

  • affected version or commit
  • deployment type (installer, Docker, manual) and whether a reverse proxy is used
  • steps to reproduce and the impact you observed

Supported versions

Only the latest release on the default branch receives security fixes.

Scope

StreamVault is self-hosted. Operators are responsible for TLS, firewalling and keeping VOD_SECRET_KEY / STORAGE_ENCRYPTION_KEY secret. Reports about insecure defaults that ship with this repository are in scope.