Skip to content

Latest commit

 

History

History
32 lines (20 loc) · 998 Bytes

SECURITY.md

File metadata and controls

32 lines (20 loc) · 998 Bytes

Security Policy

Supported Versions

Version Supported
1.x Yes

Reporting a Vulnerability

Please do not open a public issue for security vulnerabilities.

If you discover a security vulnerability in this package, please report it via GitHub Security Advisories.

Include as much of the following as you can:

  • A description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Suggested fix (if any)

What to Expect

  • Acknowledgement within 48 hours
  • Status update within 5 business days
  • Fix or mitigation as soon as reasonably possible, depending on severity

We will coordinate with you on disclosure timing. We ask that you give us reasonable time to address the issue before public disclosure.

Scope

This policy applies to the churchsuite-api npm package. For vulnerabilities in the ChurchSuite platform itself, please contact ChurchSuite directly.