Skip to content

SECURITY.md

Latest commit

 

History

History
32 lines (20 loc) · 1016 Bytes

SECURITY.md

File metadata and controls

32 lines (20 loc) · 1016 Bytes

Security Policy

Supported Versions

The OWASP Nest project follows a rolling release model. Only the latest version on the main branch is actively supported with security updates.

Reporting a Vulnerability

If you discover a security vulnerability in OWASP Nest, please report it responsibly.

How to Report

Please use this form to report a security vulnerability. Please do not create public GitHub issues for security-related reports.

What to Include

When reporting a vulnerability, please include:

  • A clear description of the issue
  • Steps to reproduce (if applicable)
  • Potential impact
  • Any relevant logs or screenshots

Response Timeline

  • Initial acknowledgment: within 10 days
  • Investigation and validation: within 30 days depending on the issue severity
  • Fix and coordinated disclosure: within 90 days after investigation and validation

Thank you for helping keep OWASP Nest and the community secure.