Skip to content

Repository navigation

Security: darrshangovender/cascade

Security

Report a vulnerability

SECURITY.md

Security policy

Reporting a vulnerability

Please report security issues privately — do not open a public issue.

  • Use GitHub's Report a vulnerability button on the repository's Security tab (private vulnerability reporting), or
  • email darrshangovender@gmail.com with the subject line SECURITY: <repository>.

Include the affected repository and version or commit, a description of the issue and its impact, and steps or a proof of concept to reproduce it.

What to expect

  • Acknowledgement within 3 business days.
  • An initial assessment and a planned fix timeline within 10 business days.
  • Credit in the release notes if you would like it, once a fix is released.

Scope

These are open-source libraries and reference implementations. Reports about the code in these repositories are in scope. Deployments run by third parties are out of scope; please report those to their operators.

Supported versions

Fixes land on the default branch and in the next tagged release. Older releases are not patched separately.

There aren't any published security advisories