From 0a1b031c6009f5d6b77a26bce30880229ad5d899 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rapha=C3=ABl=20Vinot?= Date: Wed, 17 Jun 2020 11:44:46 +0200 Subject: [PATCH] Create SECURITY.md --- SECURITY.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..cf52151 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,15 @@ +# Security Policy + +## Supported Versions + +At any point in time, we only support the latest version of Lookyloo. +There will be no security patches for other releases (tagged or not). + +## Reporting a Vulnerability + +In the case of a security vulnerability report, we ask the reporter to send it directly to +[CIRCL](https://www.circl.lu/contact/), if possible encrypted with the following GnuPG key: +**CA57 2205 C002 4E06 BA70 BE89 EAAD CFFC 22BD 4CD5**. + +If you report security vulnerabilities, do not forget to **tell us if and how you want to +be acknowledged** and if you already requested CVE(s). Otherwise, we will request the CVE(s) directly.