Skip to content

Security: Mayconrib808/OpenOmsi-BBS

Security

SECURITY.md

Security Policy / Política de Segurança

Supported versions

Version Security reports
1.1.3 Accepted; fixes reviewed on a best-effort basis
Older versions Upgrade to 1.1.3 before reproducing the issue
Development builds Reports welcome; experimental and not release-certified

This is a community-maintained experimental bridge. There is no guaranteed response or patch deadline.

Reporting a vulnerability

Contact Mayconrib808 privately on Discord .zmaycon. (both dots). State that you are reporting a security issue in OpenOmsi + BBS.

Provide the affected version, a concise impact description and reproducible steps using synthetic or redacted data. Include the component or file if known. Do not send passwords, authentication tokens, full account profiles or proprietary game binaries.

Do not open a public Issue with exploit details or private diagnostic files. Ordinary crashes and compatibility problems should use the bug report form.

The maintainer will investigate, request information if needed and coordinate a fix or explanation. Reporter credit can be included with consent. Public disclosure should wait until users have a practical mitigation or fix.

Scope

Reports about this project's Setup, launcher, compatibility facade, plugin host, configuration, diagnostics or build/release process belong here. Vulnerabilities in OMSI 2, openOMSI, BCS/BBS, Windows or Steam should also be reported to their maintainers. This project cannot fix proprietary vendor components.

Português do Brasil

A 1.1.3 recebe relatos de segurança conforme a disponibilidade do mantenedor. Em versões antigas, atualize e tente reproduzir novamente.

Envie vulnerabilidades por mensagem privada a Mayconrib808 no Discord .zmaycon.. Informe a versão, o impacto e como reproduzir com dados fictícios ou revisados. Não publique detalhes de exploração, senhas, tokens ou diagnósticos completos em Issues públicas.

Falhas comuns devem usar o formulário de problemas. Não há prazo garantido para análise ou correção.

There aren't any published security advisories