Paul Nothaft
67b0f32456
- Replace placeholder [email protected] with [email protected] - Add GitHub Private Vulnerability Reporting links - Update supported versions table to 2.x.x Closes #223
37 lines
977 B
Markdown
37 lines
977 B
Markdown
---
|
|
name: Security Vulnerability
|
|
about: Report security issues privately
|
|
title: '[SECURITY] '
|
|
labels: 'security'
|
|
assignees: ''
|
|
|
|
---
|
|
|
|
⚠️ **IMPORTANT: For serious security vulnerabilities, please DO NOT create a public issue.**
|
|
|
|
Instead, please use [GitHub Private Vulnerability Reporting](https://github.com/the-luap/picpeak/security/advisories/new) or email **[email protected]** with the details.
|
|
|
|
For minor security improvements or questions, you can use this template:
|
|
|
|
**Type of Security Issue**
|
|
- [ ] Authentication/Authorization
|
|
- [ ] Data Exposure
|
|
- [ ] Input Validation
|
|
- [ ] Configuration Issue
|
|
- [ ] Dependency Vulnerability
|
|
- [ ] Other: ___________
|
|
|
|
**Description**
|
|
Brief description of the security concern.
|
|
|
|
**Impact**
|
|
What could an attacker potentially do?
|
|
|
|
**Steps to Reproduce**
|
|
If applicable, how can this be reproduced?
|
|
|
|
**Suggested Fix**
|
|
If you have ideas on how to fix this issue.
|
|
|
|
**References**
|
|
Any relevant security advisories, CVEs, or documentation. |