IMPORTANT: DO NOT open public issues on this repository for security vulnerabilities.
Our canonical policies are maintained here:
-
Security Policy (reporting process, scope, disclosure standards):
https://github.com/cosmos/security/blob/main/SECURITY.md -
Release & Maintenance Policy (supported versions, lifecycle, EOL):
https://github.com/cosmos/security/blob/main/POLICY.md -
HackerOne Bug Bounty Program:
https://hackerone.com/cosmos
All vulnerability scope, supported versions, lifecycle timelines, and reporting procedures are governed by the Security Policy and Release & Maintenance Policy linked above.
Security vulnerabilities must be reported via:
- HackerOne: https://hackerone.com/cosmos
Please refer to the Security Policy for full reporting and disclosure details.