Skip to content

Repository navigation

Security: mnema-work/.github

Security

SECURITY.md

Security policy

This is the default policy for the repositories of the mnema-work organization that do not carry their own. A repository's own SECURITY.md (the product's is in mnema) says which versions it supports and what is in scope there, and it takes precedence over this page.

Reporting a vulnerability

Please do not open a public issue, discussion or pull request for a security problem.

  • Use GitHub's private vulnerability reporting on the repository concerned: its Security tab, then Report a vulnerability. The conversation, the fix and the advisory continue there.
  • If you cannot use GitHub, write to security@mnema.work with what you found and how to reproduce it. The reply comes through a private security advisory on the repository, so a GitHub account will be needed to follow it.

When a fix is published, the advisory says what was found, which versions it affects and which version fixes it.

There aren't any published security advisories