2019-05-26 18:16:10 +02:00
|
|
|
# Security Policy
|
|
|
|
|
|
|
|
|
|
## Supported Versions
|
|
|
|
|
|
|
|
|
|
Overview over versions of ChestShop that are currently being actively developed
|
|
|
|
|
and which ones are supported with security updates if necessary.
|
|
|
|
|
|
|
|
|
|
| Version | Active development | Security Fixes |
|
|
|
|
|
| ------------- | ------------------ | ------------------ |
|
2020-07-28 01:30:56 +02:00
|
|
|
| 3.11 (latest) | :heavy_check_mark: | :heavy_check_mark: |
|
|
|
|
|
| < 3.11 | :x: | :x: |
|
2019-05-26 18:16:10 +02:00
|
|
|
| 3.9.3-1.12 | :x: | :heavy_check_mark: |
|
|
|
|
|
| 3.9.2-1.8.8 | :x: | :heavy_check_mark: |
|
|
|
|
|
|
|
|
|
|
Updates for the different versions can be found on the [build server](https://ci.minebench.de/job/ChestShop-3/),
|
|
|
|
|
only the latest version will get releases on the main project pages.
|
|
|
|
|
|
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
|
|
|
|
|
|
If you want to report an issue which might pose a security risk then
|
|
|
|
|
you can do this in private at the following locations:
|
|
|
|
|
|
|
|
|
|
- [Start a conversation](https://www.spigotmc.org/conversations/add?to=Phoenix616&title=ChestShop%20Vulnerability) with Phoenix616 on SpigotMC.org
|
|
|
|
|
- Message phoenix616 on the [SpigotMC IRC network](https://irc.spi.gt/) (irc.spi.gt)
|
|
|
|
|
- Message phoenix616 on the [Esper.net IRC network](https://esper.net)
|
|
|
|
|
|
|
|
|
|
For issues that do not have security implications please [open an issue](https://github.com/ChestShop-authors/ChestShop-3/issues/new/choose).
|
