Skip to content

Security: HassanKorey/DripsLens

Security

SECURITY.md

Security Policy

Supported Versions

We actively maintain and provide security patches for the following versions:

Version Supported
2.x ✅ Supported
< 2.0 ❌ End of Life

Reporting a Vulnerability

The DripsLens maintainers take security and data integrity seriously. If you discover a security vulnerability, we appreciate your help in disclosing it responsibly.

How to Report

Please do not open a public GitHub issue for security vulnerabilities. Instead, email the lead maintainer directly:

  • Contact: Hassan Akorede (EDUN)
  • Email: edunhassan1006@gmail.com
  • Subject Line: [SECURITY VULNERABILITY] DripsLens: Brief Description

Information to Include

Please provide:

  1. Description of the vulnerability.
  2. Steps to reproduce the issue (proof of concept script or request trace).
  3. The affected component (app/services, app/routers, app/cache, etc.).
  4. Potential impact and severity assessment.

Response Timeline & Disclosure Policy

  • Initial Acknowledgement: Within 24 hours.
  • Assessment & Triage: Within 48 hours.
  • Fix & Deployment: Security fixes will be prioritized, tested, and deployed to production within 7 days.
  • Public Disclosure: A public advisory will be published after the patch is deployed and verified.

There aren't any published security advisories