Skip to content

Repository navigation

Security: FOGProject/fog-node

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported versions

fog-node (FOG 2.0) has no release yet. Security fixes go to master. For FOG 1.x, see the security policy in FOGProject/fogproject.

Reporting a vulnerability

Report a vulnerability privately, so that we can fix it before it is public.

Use the Report a vulnerability button on this repository's Security tab. It opens a private advisory that only you and the maintainers can see.

Do not open a public issue for a security vulnerability.

If you cannot use GitHub advisories, open a normal issue that says only that you have a security report and asks for a private contact. Put no details in the public issue.

Please include:

  • the affected commit or branch
  • the steps to reproduce the problem
  • what an attacker can do with it

We acknowledge a report, investigate it, and credit the reporter in the advisory unless the reporter asks us not to.

There aren't any published security advisories