Create SECURITY.md

pull/2224/merge
AaronLiu 2025-05-08 16:50:10 +08:00 committed by GitHub
parent a0b4c97db0
commit 6e82ce2a9d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 10 additions and 0 deletions

10
SECURITY.md Normal file
View File

@ -0,0 +1,10 @@
# Security Policy
## Supported Versions
* For security issues with high-impacts (e.g. related to payments or user permission), we support 3.8.x and all 4.x version. But the fix for 4.x will released only in latest sub-version.
* For all other security issues, we mainly support version >= 4.x (in which `x` is the latest stable sub-version).
## Reporting a Vulnerability
Please send the details about the security issue to `support@cloudreve.org`. Once the vulnerability is comfirmed or fixed, you will get updates from the email thread.