aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/SECURITY.md
diff options
context:
space:
mode:
authorAndreas Gohr <andi@splitbrain.org>2021-12-12 13:53:03 +0100
committerGitHub <noreply@github.com>2021-12-12 13:53:03 +0100
commit22b04d8db65da89d8f091b893e86c3c3b1568ffb (patch)
tree8d59a9ca4016060b206b6557930f4db2cb136f1e /SECURITY.md
parent54bcc3a63ceaf7648c041f7555fee816cb593bf6 (diff)
downloaddokuwiki-22b04d8db65da89d8f091b893e86c3c3b1568ffb.tar.gz
dokuwiki-22b04d8db65da89d8f091b893e86c3c3b1568ffb.zip
create SECURITY.md fixes #3558
Diffstat (limited to 'SECURITY.md')
-rw-r--r--SECURITY.md16
1 files changed, 16 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..321935a0e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,16 @@
+# Security Policy
+
+Security vulnerabilities can be reported for the current stable release (branch `stable`) and the `master` branch.
+
+We try to fix vulnerabilites as fast as possible, but please keep in mind that this is a project run by volunteers. Depending on the severity we may release hotfixes for the current stable release or may simply incorporate the fix in the next proper release.
+
+**This policy only applies to DokuWiki and the bundled plugins. Do not report issues about 3rd party plugins here.**
+
+## Reporting a Vulnerability
+
+You have multiple options on reporting vulnerabilities
+
+* Use [huntr.dev](https://www.huntr.dev/bounties/disclose/?target=https%3A%2F%2Fgithub.com%2Fsplitbrain%2Fdokuwiki%2F)
+* Send an e-mail to [Andi](mailto:andi@splitbrain.org)
+* Open a [Github Issue](https://github.com/splitbrain/dokuwiki/issues)
+* Send a mail to the [Mailing List](https://www.dokuwiki.org/mailinglist)