ChestShop-3/SECURITY.md
2021-02-19 13:38:35 +01:00

28 lines
1.3 KiB
Markdown

# Security Policy
## Supported Versions
Overview over versions of ChestShop that are currently being actively developed
and which ones are supported with security updates if necessary.
| Version | Active development | Security Fixes |
| ------------- | ------------------ | ------------------ |
| latest | :heavy_check_mark: | :heavy_check_mark: |
| < latest | :x: | :x: |
| 3.9.3-1.12 | :x: | :heavy_check_mark: |
| 3.9.2-1.8.8 | :x: | :heavy_check_mark: |
Updates for the different versions can be found on the [build server](https://ci.minebench.de/job/ChestShop-3/),
only the latest version will get releases on the main project pages.
## Reporting a Vulnerability
If you want to report an issue which might pose a security risk then
you can do this in private at the following locations:
- [Start a conversation](https://www.spigotmc.org/conversations/add?to=Phoenix616&title=ChestShop%20Vulnerability) with Phoenix616 on SpigotMC.org
- Message phoenix616 on the [SpigotMC IRC network](https://irc.spi.gt/) (irc.spi.gt)
- Message phoenix616 on the [Esper.net IRC network](https://esper.net)
For issues that do not have security implications please [open an issue](https://github.com/ChestShop-authors/ChestShop-3/issues/new/choose).